From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1NutQE-00064U-1W for garchives@archives.gentoo.org; Thu, 25 Mar 2010 20:12:54 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2FEFCE0883; Thu, 25 Mar 2010 20:12:10 +0000 (UTC) Received: from flounder.pepperfish.net (flounder.pepperfish.net [87.237.62.181]) by pigeon.gentoo.org (Postfix) with ESMTP id 0B1C7E0883 for ; Thu, 25 Mar 2010 20:12:10 +0000 (UTC) Received: from cpc2-asht1-0-0-cust798.manc.cable.ntl.com ([80.5.55.31] helo=master) by flounder.pepperfish.net with esmtpsa (Exim 4.69 #1 (Debian)) id 1NutOx-0002jU-Q0 for ; Thu, 25 Mar 2010 20:11:35 +0000 Received: from trite.i.flarn.net ([10.19.3.100] helo=trite.i.flarn.net.i.flarn.net) by master with esmtp (Exim 4.69) (envelope-from ) id 1NutPU-0004hB-T1 for gentoo-hardened@lists.gentoo.org; Thu, 25 Mar 2010 20:12:09 +0000 Date: Thu, 25 Mar 2010 20:12:08 +0000 From: Rob Kendrick To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Bought an "entropy-key" - very happy Message-ID: <20100325201208.2d213cad@trite.i.flarn.net.i.flarn.net> In-Reply-To: <4BABB06F.5232.1636AE96@pageexec.freemail.hu> References: <20100325131033.0dc5429b@trite.i.flarn.net.i.flarn.net> <4BABB06F.5232.1636AE96@pageexec.freemail.hu> X-Mailer: Claws Mail 3.7.2 (GTK+ 2.18.3; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: cac81afd-9061-4e50-a09d-bb7243b0001b X-Archives-Hash: 4cf3de4b338c334ff9489dea6ae8cd0a On Thu, 25 Mar 2010 19:50:23 +0200 pageexec@freemail.hu wrote: > > it goes to extraordinary lengths to make sure the entropy that is > > injected into your pool can't be sniffed before it gets there, > > out of curiosity, what's that mean exactly? That somebody with a few probes and a 50 quid USB logic analyser can't capture the entropy that was delivered to the system. (One of the target markets is installation in shared co-location facilities.) B.