From mboxrd@z Thu Jan  1 00:00:00 1970
From: David Craven <david@craven.ch>
Subject: Re: [PATCH 2/2] services: Add 'dropbear-service'.
Date: Sat, 9 Jul 2016 16:39:02 +0200
Message-ID: <CAL1_imngQYMNaQJ6c=P7=wrRwXy0XJt2S=g2msf_ojnT8LNVRA@mail.gmail.com>
References: <20160704205616.11599-1-david@craven.ch>
	<20160704205616.11599-2-david@craven.ch>
	<20160707172517.GA5283@jasmine>
	<CAL1_imm_usAMVg+6A4hgCAd4hFqVp82Wm8o6B3_htuKZj=+J_A@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:53863)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bLtPU-0003zZ-TN
	for guix-devel@gnu.org; Sat, 09 Jul 2016 10:39:14 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bLtPP-0001O9-LD
	for guix-devel@gnu.org; Sat, 09 Jul 2016 10:39:11 -0400
Received: from mail-yw0-x244.google.com ([2607:f8b0:4002:c05::244]:35436)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <david@craven.ch>) id 1bLtPO-0001MN-Ds
	for guix-devel@gnu.org; Sat, 09 Jul 2016 10:39:07 -0400
Received: by mail-yw0-x244.google.com with SMTP id c13so10511200ywh.2
	for <guix-devel@gnu.org>; Sat, 09 Jul 2016 07:39:03 -0700 (PDT)
In-Reply-To: <CAL1_imm_usAMVg+6A4hgCAd4hFqVp82Wm8o6B3_htuKZj=+J_A@mail.gmail.com>
List-Id: "Development of GNU Guix and the GNU System distribution."
	<guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-devel/>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org
Sender: "Guix-devel" <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
To: Leo Famulari <leo@famulari.name>
Cc: guix-devel@gnu.org

Yeah, I should have better said I don't know instead of talking out of my ass.

All I can really do is trust that the people who write security
related code know what they are doing.

Is there anything else holding this up?

Cheers,
David

On Thu, Jul 7, 2016 at 7:54 PM, David Craven <david@craven.ch> wrote:
> That's my understanding too. From a quick glance at the source it
> falls back onto stuff from /proc /sys. I guess there are weaker links
> in a system dough, but I'm also no expert.
>
> On a side note there are the matsano crypto challanges that are pretty
> cool, in case you haven't heard of them, I never got to the
> implementing/cracking prngs dough, simply not enough time...
>
> [0]
> https://github.com/mkj/dropbear/blob/master/dbrandom.c#L205
> http://cryptopals.com/