Messages in this thread | | | Date | Thu, 5 Sep 2013 15:03:34 -0400 | From | Theodore Ts'o <> | Subject | Re: [PATCH] random, Add user configurable get_bytes_random() |
| |
On Thu, Sep 05, 2013 at 11:08:28AM -0400, Prarit Bhargava wrote: > > The issue isn't userspace /dev/random as much as it is the use of > get_random_bytes() through out the kernel. Switching to get_random_bytes_arch() > is a search'n'replace on the entire kernel. If a user wants the faster random > HW generator why shouldn't they be able to use it by default?
Where is the speed of the random number generator a bottleneck?
In general, adding knobs when users can make what might be potentially the wrong chance is very dangerous. There is a reason why there aren't convenient knobs to allow users to select the use of the MD4 checksum, "because it might be faster, why shouldn't the user be allowed to shoot themselves in the foot"?
- Ted
| |