[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [MirageOS-devel] Update on entropy



On 27 Mar 2015, at 17:01, Thomas Gazagnaire <thomas@xxxxxxxxxxxxxx> wrote:
> 
> 
>> It would also be good to port the TCP/IP stack to using nocrypto at
>> the same time, to give it the IP ID and TCP ISN random sources, and
>> to have more than one consumer outside of the TLS stack.  This is a
>> very localised patch -- it currently uses the Random module directly.
> 
> Just a quick note on that: Hannes and David pointed out that this means we'll 
> depend on gmp for any unikernel using the TCP/IP stack. It's a big chunk of C 
> code (which takes ages to compile on the cubiboard), so that would be nice to 
> keep the ability to use the normal Random if wanted.

It should still be a functor rather than using the Random toplevel
module directly, though.  We could just supply a compatibility shim
to map the Random interface into a nocrypto-style one.

-anil
_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.