Re: /dev/random issue

[Tobias Nygren <tnn%NetBSD.org@localhost>]

On Thu, 1 Oct 2020 18:57:12 +0200
Manuel Bouyer <bouyer%antioche.eu.org@localhost> wrote:

> > > OK. But how is it preserved across reboot ? Where does the kernel stores it ?
> > 
> > Shutdown process will store a new seed file
> 
> ha OK, so it's preserved on shutdown(8), not reboot(2) 
> 
> which, basically. means that one should not use reboot, halt or poweroff
> any more ...

The seed file also gets rewritten immediately after being loaded during
rc boot, so that an adversary that can trigger a power outage or reset
cannot trivially force a seed to be reused.

-Tobias