Re: One-line password generator

[Zenaan Harkness <zenaan@freedbms.net>]

On Tue, Aug 29, 2017 at 06:49:45PM +1000, Zenaan Harkness wrote:
> I stated:
> > >   https://www.2uo.de/myths-about-urandom/structure-yes.png
> 
> > > The new situation as stated in
> > >   https://www.2uo.de/myths-about-urandom/structure-new.png
> > 
> > I always thought (even pre- Kernel 4.8) that structure-new was how it
> > worked. But on the other hand, it's just a diagram - use the source,
> > Duke!
> 
> Sorry, structure-yes is what I thought it was, and thought it still
> was, but seems it may no longer be.
> 
> I don't understand the difference between -yes and -new; on its face,
> "-new" looks actually wrong to me - but it's just someone's diagram,
> the source code is the truth of what happens in the kernel.
> 
> Good luck,

PPS - if I were to draw what I understand "structure-new" to actually
be, I would change structure-yes as follows:

 1. swap "CSPRNG" and "randomness pool" so the former now comes after
    the latter.

 2. connect CSPRNG (now below the pool) to /dev/urandom with the line


I have not read the code, and do not understand the change that's
happened properly though.

Good luck,