[lkml]   [2001]   [Aug]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: /dev/random in 2.4.6
    On Mon, 20 Aug 2001, Chris Friesen wrote:

    > Alex Bligh - linux-kernel wrote:
    > > An alternative approach to all of this, perhaps, would be to use extremely
    > > finely grained timers (if they exist), in which case more bits of entropy
    > > could perhaps be derived per sample, and perhaps sample them on
    > > more operations. I don't know what the finest resolution timer we have
    > > is, but I'd have thought people would be happier using ANY existing
    > > mechanism (including network IRQs) if the timer resolution was (say)
    > > 1 nanosecond.
    > Why don't we also switch to a cryptographically secure algorithm for
    > /dev/urandom? Then we could seed it with a value from /dev/random and we would
    > have a known number of cryptographically secure pseudorandom values. Once we
    > reach the end of the png cycle, we could re-seed it with another value from
    > /dev/random.

    /dev/random and /dev/urandom use the same SHA1 hashing algorithm and there
    are no known practical attacks against them. What makes /dev/random
    different is that it keeps track of how much random information has been
    put in vs how much is taken out and never lets you go below zero. This
    means that the data coming out (already unguessable in practice) is now
    unguessable even in theory[1].

    This whole discussion is pretty silly. /dev/urandom is already at least as
    strong as any encryption scheme you're likely to use with it. To break it,
    you're going to have break SHA over a 512-bit pool with a nasty round
    function, never mind all the other complexities. It's almost certainly
    more practical for someone to brute force your 128-bit SSL session keys or
    factor your RSA keys. Or beat your root password out of you with a rubber

    [1] Assuming its entropy estimates are conservative enough.
    "Love the dolphins," she advised him. "Write by W.A.S.T.E.."

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 12:57    [W:0.021 / U:4.868 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site