Linked Questions
11 questions linked to/from Feeding /dev/random entropy pool?
2
votes
1
answer
7k
views
Why is /dev/random so slow on Linux? [duplicate]
If it's true you only need about 128 bits of entropy to fuel enough data forever, why is it that /dev/random is so slow? My system has uptime of 214 days!
Is it really only gathering .000000001 bits ...
204
votes
4
answers
62k
views
Is a rand from /dev/urandom secure for a login key?
Lets say I want to create a cookie for a user. Would simply generating a 1024 bit string by using /dev/urandom, and checking if it already exists (looping until I get a unique one) suffice?
Should I ...
30
votes
5
answers
35k
views
What do I need to configure, to make sure my software uses /dev/urandom?
When setting up a server, what configuration changes do I need to make sure that all of the software uses /dev/urandom instead of /dev/random?
Some servers don't have much entropy in the entropy pool ...
10
votes
3
answers
2k
views
Allowing the public to generate a CSR from your private key
As a hosting provider, I'd like to make the process of generating a certificate for a customer's domain as convenient as possible.
I was pondering creating a webpage where anyone could:
generate a ...
6
votes
3
answers
3k
views
Pseudo Random Generator is not initialized from the (entropy pool)?
The RHEL5 manuals state that /dev/urandom will use the entropy pool until it's exhausted, and then it will resort to a fall-back pseudo-random algorithm, so that it will never block.
But when ...
10
votes
3
answers
1k
views
Is it worth augmenting /dev/random entropy in software?
Modern Linux systems, especially headless virtuals, often have shallow /dev/random entropy pools, which can cause software to block or fail to run (e.g. Tripwire in FIPS mode)
While many agree /dev/...
12
votes
2
answers
3k
views
How is the available entropy in /dev/random calculated (or estimated)?
It seems (to a non-expert) that /dev/random is acclaimed to be useable as a source of pure random data. However, I am curious as to the analysis of the file /dev/random.
/dev/random is a collection ...
3
votes
1
answer
3k
views
How can I increase /proc/sys/kernel/random/entropy_avail
I have access to genuine random numbers - random.org, for example.
I have a number of processes using /dev/random and my value for /proc/sys/kernel/random/entropy_avail is 143, which is pretty low.
...
3
votes
1
answer
2k
views
How negative are virtual machines (vms) to /dev/urandom?
I looked at the questions here and here.
This then piqued my interest as I've recently been involved with looking into FIPS compliance, and in my vm environment /dev/urandom compliance testing ...
11
votes
2
answers
1k
views
Can I use hardware random number generation on my computer? Am I already using it?
A lot of computer security depends on encryption: SSL connections, TCP packet sequencing, encrypted files, etc. These depend on random number generation to ensure that attackers can't guess the ...
1
vote
1
answer
256
views
Feeding entropy pool with my own data [duplicate]
Let's state that I have a huge bunch of truly unpredictable random data in file "random.bin". The random data has been created outside of my system and has been securely transfered into my ...