2

Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy?

If it does impact it, how do you mitigate that risk and are all cryptographic programs equals likely to suffer this?

1
2

The response is NO, the crypto operations in general are generated by libraries like openssl, libsodium and so on, no by a docker. The only case that came to my mind is that your docker uses old libraries that have vulnerabilities or issues.

1
  • I was about to downvote this for not being true, because it isn't true for some of the operations that OP mentions: You need random numbers for key-generation and exchange methods like Diffie-Hellmann. Containers still get their library through syscalls / random device files that are offered by the host, which might, considering there might be very many containers coordinating to "poison" the entropy pool be affected. I'm not aware of a practical attack, though. – Marcus Müller Dec 19 '19 at 23:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.