Not sure if this is the right forum, and I am pretty sure that his must have been answered before (I searched a lot but I haven't found a definitive answer).
Do the Linux random number generators (/dev/random
and /dev/urandom
) comply to any industry standards? More specifically, if my application uses /dev/random
, can I achieve compliance with regulations that require the employed random number generator fulfill some standard?
For example, if my application uses /dev/random
, can I claim that the random numbers are NIST SP 800-90A DRGB compliant?
Apologies if this is off-topic or obvious, but as I said, I could not find a definitive answer anywhere.
(I was directed here from https://crypto.stackexchange.com/)
random
andurandom
in a cryptography context: "Myths about /dev/urandom"