Re: [PATCH] random, Add user configurable get_bytes_random()

[Theodore Ts'o]

On Thu, Sep 05, 2013 at 11:08:28AM -0400, Prarit Bhargava wrote:
> 
> The issue isn't userspace /dev/random as much as it is the use of
> get_random_bytes() through out the kernel.  Switching to get_random_bytes_arch()
> is a search'n'replace on the entire kernel.  If a user wants the faster random
> HW generator why shouldn't they be able to use it by default?

Where is the speed of the random number generator a bottleneck?

In general, adding knobs when users can make what might be potentially
the wrong chance is very dangerous.  There is a reason why there
aren't convenient knobs to allow users to select the use of the MD4
checksum, "because it might be faster, why shouldn't the user be
allowed to shoot themselves in the foot"?

					- Ted
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/