[lkml]   [2001]   [Aug]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRE: /dev/random in 2.4.6
> -----Original Message-----
> From:
> [] On Behalf Of Marco Colombo
> Sent: Tuesday, 21 August 2001 03:46
> To: Alex Bligh - linux-kernel
> Cc: David Wagner;
> Subject: Re: /dev/random in 2.4.6
> A little question: I used to believe that crypto software
> requires strong random source to generate key pairs, but this
> requirement in not true for session keys. You don't usually
> generate a key pair on a remote system, of course, so that's
> not a big issue. On low-entropy systems (headless servers) is
> /dev/urandom strong enough to generate session keys? I guess
> the little entropy collected by the system is enough to feed
> the crypto secure PRNG for /dev/urandom, is it correct?

I dunno about you, but I want good random for session keys too! You can
still capture network traffic and decrypt at your leisure if you can
determine what the "random" number was used in making the session key.


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:57    [W:0.082 / U:0.460 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site