diff options
author | Theodore Ts'o <tytso@mit.edu> | 2013-10-03 03:10:35 +0200 |
---|---|---|
committer | Theodore Ts'o <tytso@mit.edu> | 2013-10-10 20:32:21 +0200 |
commit | 95b709b6be49e4ff3933ef6a5b5e623de2713a71 (patch) | |
tree | 29d560bdef37bafaf732900ec3f14380e4ec0d70 /include/trace/events/random.h | |
parent | random: adjust the generator polynomials in the mixing function slightly (diff) | |
download | linux-95b709b6be49e4ff3933ef6a5b5e623de2713a71.tar.xz linux-95b709b6be49e4ff3933ef6a5b5e623de2713a71.zip |
random: drop trickle mode
The add_timer_randomness() used to drop into trickle mode when entropy
pool was estimated to be 87.5% full. This was important when
add_timer_randomness() was used to sample interrupts. It's not used
for this any more --- add_interrupt_randomness() now uses fast_mix()
instead. By elimitating trickle mode, it allows us to fully utilize
entropy provided by add_input_randomness() and add_disk_randomness()
even when the input pool is above the old trickle threshold of 87.5%.
This helps to answer the criticism in [1] in their hypothetical
scenario where our entropy estimator was inaccurate, even though the
measurements in [2] seem to indicate that our entropy estimator given
real-life entropy collection is actually pretty good, albeit on the
conservative side (which was as it was designed).
[1] http://eprint.iacr.org/2013/338.pdf
[2] http://eprint.iacr.org/2012/251.pdf
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
Diffstat (limited to 'include/trace/events/random.h')
0 files changed, 0 insertions, 0 deletions