Re: [RFC] i_generation numbers.

Stuart MacDonald (stuartm@connecttech.com)
Tue, 21 Sep 1999 10:37:46 -0400


From: Alan Cox <alan@lxorguk.ukuu.org.uk>
> > Olaf Kirch wrote:
> > > You can't produce good random numbers fast, which is what fsirand
> > > would have to.
> > I recall the Mersenne Twister is fast and thought to be very good.
> To protect against NFS attacks you need to produce good and secure random
> numbers, which is even harder. What you should do of course is forget the
> whole NFS security through silly hacks game. MD5 is exportable and ANK
> wrote MD5 signed RPC code for userspace.

www.counterpane.com has developed a secure PRNG. See
www.counterpane.com/yarrow.html

...Stu

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/