Questions tagged [devrandom]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3
votes
1answer
65 views

Randomly generating invoice IDs

I'm in the process of setting up a local (i.e. offline and very limited) business, and I'm thinking of generating invoice IDs randomly to avoid the clients knowing that they're customer number #...
3
votes
1answer
82 views

Does rngd -r /path/to/file inject into /dev/urandom in addition to /dev/random?

I'm new to the /dev/random and /dev/urandom pipes in general and have an application calling from /dev/urandom which I'm attempting to inject entropy into. I'd prefer not to change the source for ...
9
votes
1answer
989 views

Is reading from /dev/urandom on macOS Catalina a safe way to produce cryptographically secure data?

I'm reading a lot about entropy on macOS... I know it doesn't use Yarrow anymore as per this FIPS 140-02 doc a NIST compliant DRBG. I read a lot: https://github.com/briansmith/ring/pull/398 How ...
3
votes
1answer
210 views

An alternative for /dev/urandom

I like to overwrite my harddisk with random data. Since /dev/urandom as source is too slow to overwrite a large amount of data in a reasonable time, I'm looking for a good alternative. These two ...
0
votes
0answers
34 views

What is the difference between /dev/random and /dev/urandom? [duplicate]

Simply put, what are the differences between /dev/random and /dev/urandom from a developer's standpoint? Which one should I use for cryptographic purposes?
4
votes
1answer
136 views

Is pressing random keys a secure way to seed a key generator?

There's a couple of programs that I've been using recently that ask you to type random keys as a source of randomness to seed an RNG for key generation. Is this considered a good practice still, or ...
3
votes
1answer
331 views

Would `cat /dev/random` be a denial of service to any other users of `/dev/random`?

As in the question. Wouldn't cat /dev/random decrease the entropy estimate until it blocks, which forces the random device to block for all applications on the current system?
2
votes
1answer
766 views

Can I use /dev/urandom for generating cryptographic keys? [duplicate]

I need to generate thousands of cryptographic keys. Can I just read the bits from /dev/urandom on a Red Hat system, or do I need to run it through a PRNG? My understanding is that /dev/urandom should ...
3
votes
2answers
141 views

Is it still secure if a cryptographic key generated with OpenSSL while a backdoored HWRNG used?

Assuming I plugged a HWRNG in to my Linux machine, use OpenSSL to generate a RSA key pair and encrypted some text with AES. Later then, a researcher posted the HWRNG was backdoored. Should I consider ...
2
votes
2answers
188 views

Token generation and random numbers

I have a swift server, where currently authentication is handled through a simple email+hashed password combination. I want to replace this with an access token ( + expiration ) so I can remove the ...
2
votes
1answer
966 views

Windows .NET equivalent to Linux /dev/random

Is there a pseudo device-based random data stream/file that can be used in Windows .NET programming in the same way as /dev/random can be read and used as a source of random values on Linux based ...