Re: Secure random ID generation

From: Valdis.Kletnieksat_private
Date: Tue Dec 03 2002 - 22:19:01 PST

  • Next message: Dana Epp: "Re: Security Education in the Workplace" 

    On Tue, 03 Dec 2002 19:26:23 EST, Jose Nazario said:
> On Tue, 3 Dec 2002 Valdis.Kletnieksat_private wrote:
> 
> > Not all systems have a /dev/random.
> 
> secure, portale (ie userland) entropy gathering daemons exist. however,
> most languages have some form of a PRNG. its a lot easier than trying to
> write your own.

Not only do some systems not have a /dev/random, but most languages have
a truly abysmal built-in PRNG.  Using it may be a lot easier, but if you're
using a poor PRNG, you'll pay for it later....

    This archive was generated by hypermail 2b30 : Wed Dec 04 2002 - 08:44:42 PST