Re: [RFC][PATCH] Make cryptoapi non-optional?

David S. Miller
2003-08-15T07:40:13Z

On Fri, 15 Aug 2003 09:30:03 +0200
Andries Brouwer <aebr@win.tue.nl> wrote:

> On Thu, Aug 14, 2003 at 06:17:13PM -0600, Val Henson wrote:
>
> > entropy(x) >= entropy(x xor y)
> > entropy(y) >= entropy(x xor y)
>
> Is this trolling? Are you serious?

These lemma are absolutely true. XOR is the worst way
to gain entropy because it means that if you are able
to know anything about either 'x' or 'y' then you are
able to know something about the resulting entropy.

It is the reason our ipv4 routing cache hashes used to
be exploitable.