How is the seed for
ssh-keygen generated? I expect it will take information from
/dev/random and request supplementation with system activity if we have insufficient random bits.
An Instructor made these claims which I find suspect. Can you assist in linking documentation to show them either true or false?
"When local keys are built by a user for rsa/dsa/ecdsa encryption types. It builds it using and embedding as a seed some of the key information privately from the system. So in building the private key for rsa it will use
ssh_host_rsa_key, username, MAC Address, and
/dev/random as a seed for the local private key for the user."
Reading the man page for
ssh-keygen does not go into this detail.
Some odd things are used for seeding key-generation. For example, the process ID was shown to be the only somewhat random element in the Debian barely random key gen scandal. I find it odd that the process id was used at all.
LPIC Level 1 Exam2
Lecture: System RSA/DSA Keys