linux-kernel - entropy of /dev/random vs. openssl rand

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-id: <20070428110652.GI13982@tatooine.rebelbase.local>
Date:	Sat, 28 Apr 2007 13:06:52 +0200
From:	markus reichelt <ml@...eichelt.de>
To:	linux-crypto@...linux.org
Cc:	linux-kernel@...r.kernel.org
Subject: entropy of /dev/random vs. openssl rand

Hi,

I need to create a moderate amount of v3 keys for loop-aes and wonder
how/if the "openssl rand" implementation differs significantly from
/dev/random concerning entropy.

In case /dev/random and "openssl rand" are somewhat comparable, I
would just use the latter to create the keys.

However, I certainly don't want to use a /dev/urandom look-alike.

Any feedback appreciated.

-- 
left blank, right bald

Content of type "application/pgp-signature" skipped