Re: [PATCH RFC v0] random: block in /dev/urandom

Finn Thain
2022-02-14T22:53:09Z

On Mon, 14 Feb 2022, Jason A. Donenfeld wrote:

>
> So the only systems we're actually talking about without a good cycle
> counter are non-Amiga m68k? If so, that'd be a pretty terrific finding.
> It'd mean that this idea can move forward, and we only need to worry
> about some m68k museum pieces with misconfigured userspaces...
>

A processor cycle counter is helpful when mounting a timing attack but my
museum pieces don't suffer from that problem.

Also, they are and always were immune from spectre, meltdown etc.

You misrepresent those secure hardware designs as being problematic, just
because of some bad advice on some random blogs about RNG API usage.

Do you have a phone that no longer gets updates from its vendor? Have you
tried patching it?

Your insecure museum pieces are the real problem, not my secure ones.