Subject: Re: CVS commit: syssrc/sys/dev/ic
To: Michael Graff <explorer@flame.org>
From: Bill Studenmund <wrstuden@netbsd.org>
List: tech-kern
Date: 11/08/2001 13:58:59
On 8 Nov 2001, Michael Graff wrote:

> "Perry E. Metzger" <perry@wasabisystems.com> writes:
>
> > Sharks, in particular, have audio inputs you can sample noise from --
> > so do many such devices. If you really have nothing at all, you
> > probably should think about adding something rather than relying on
> > the network.
>
> I find it strange that you don't trust networks, but you do trust
> audio noise as a source.
>
> I seem to remember some studies that claim audio noise (with and
> without a microphone) as being a bad way to gather entropy.

Those studies would be interesting to see.

I think Perry's point (well the point I understand in this) is that
hackers can generate traffic patterns and thus push on the entropy to a
much greater degree than they can push on what the microphone jack picks
up.

Take care,

Bill