On Thu, May 15, 2008 at 06:44:22PM -0400, Jeff Garzik wrote:

Neat.  I always did prefer VIA padlock in userspace.

I just sorta assumed a buffering, interrupt-driver TPM RNG driver would be 
better than doing it from userspace, but maybe that was a bad assumption to 
make on my part.  It should be quite doable to support TPM RNG entirely via 
userspace, at any rate.

If I recall correctly, you need access to a magic TPM key just to
*talk* to the TPM.  Normally that key is stored in a file, and of
course we can have a userspace helper pull that key into the kernel,
but given the extensive Trousers infrastructure that can do this
already, it seemed to make more sense to do it all in userspace, and
not require any more kernel code.

						- Ted