2

Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy?

If it does impact it, how do you mitigate that risk and are all cryptographic programs equals likely to suffer this?

1

1 Answer 1

2

The response is NO, the crypto operations in general are generated by libraries like openssl, libsodium and so on, no by a docker. The only case that came to my mind is that your docker uses old libraries that have vulnerabilities or issues.

1
  • I was about to downvote this for not being true, because it isn't true for some of the operations that OP mentions: You need random numbers for key-generation and exchange methods like Diffie-Hellmann. Containers still get their library through syscalls / random device files that are offered by the host, which might, considering there might be very many containers coordinating to "poison" the entropy pool be affected. I'm not aware of a practical attack, though. Dec 19, 2019 at 23:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .