From 9f87be4749d0525a20c163783aeaf7e4ebd507bf Mon Sep 17 00:00:00 2001
From: deraadt <>
Date: Mon, 10 Jan 2011 06:44:49 +0000
Subject: [PATCH] talk to /dev/arandom as a single read or write. in particular
 a single write will result in a single re-key event, rather than 64 writes
 causing 64 re-keys -- wasting the kernel's time. ok guenther

---
 src/etc/rc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/etc/rc b/src/etc/rc
index a065532a..7b3fdb29 100644
--- a/src/etc/rc
+++ b/src/etc/rc
@@ -1,4 +1,4 @@
-#	$OpenBSD: rc,v 1.346 2010/12/22 18:13:14 deraadt Exp $
+#	$OpenBSD: rc,v 1.347 2011/01/10 06:44:49 deraadt Exp $
 
 # System startup script run by init on autoboot
 # or after single-user.
@@ -102,12 +102,12 @@ wsconsctl_conf()
 random_seed()
 {
 	if [ -f /var/db/host.random -a "X$random_seed_done" = "X" ]; then
-		dd if=/var/db/host.random of=/dev/arandom bs=1024 count=64 \
+		dd if=/var/db/host.random of=/dev/arandom bs=65536 count=1 \
 		    > /dev/null 2>&1
 
 		# reset seed file, so that if a shutdown-less reboot occurs,
 		# the next seed is not a repeat
-		dd if=/dev/arandom of=/var/db/host.random bs=1024 count=64 \
+		dd if=/dev/arandom of=/var/db/host.random bs=65536 count=1 \
 		    > /dev/null 2>&1
 
 		random_seed_done=1
@@ -159,7 +159,7 @@ export PATH
 . /etc/rc.conf
 
 if [ X"$1" = X"shutdown" ]; then
-	dd if=/dev/arandom of=/var/db/host.random bs=1024 count=64 >/dev/null 2>&1
+	dd if=/dev/arandom of=/var/db/host.random bs=65536 count=1 >/dev/null 2>&1
 	chmod 600 /var/db/host.random >/dev/null 2>&1
 	if [ $? -eq 0 -a -f /etc/rc.shutdown ]; then
 		echo /etc/rc.shutdown in progress...
@@ -310,7 +310,7 @@ mount -s /var >/dev/null 2>&1
 
 # if there's no /var/db/host.random, use /dev/arandom to create one
 if [ ! -f /var/db/host.random ]; then
-	dd if=/dev/arandom of=/var/db/host.random bs=1024 count=64 \
+	dd if=/dev/arandom of=/var/db/host.random bs=65536 count=1 \
 		>/dev/null 2>&1
 	chmod 600 /var/db/host.random >/dev/null 2>&1
 else