πŸš€ go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.linux
Article #183

Re: random or urandom???

#183
From: Christopher Browne
Date: Mon, 09 Sep 2002 17:19
34 lines
2990 bytes
Centuries ago, Nostradamus foresaw when "Clemens" <metax@despammed.com> would write:
> dd if=urandom of=/dev/hdb
> dd if=random of=/dev/hdb
>
> I want to overwrite my harddisk with random gibberish.
> What are the effects if I use "urandom"?
> What are the effects if I use "random"?
>
> What would you adwise, whatοΏ½s more reliable and secure?

/dev/random will block any time the "entropy pool" runs out of bits
that it considers random, and wait until it gets some more entropy.
It will take a HUGE amount of time to run on a sizable partition.

/dev/urandom does not block in that manner, and will simply use the
cipher feedback to rehash whatever is in the entropy pool.

I would suggest a _third_ possibility, namely that you set up your own
cryptographically-strong RNG (there's lots of them out there to choose
from), using it to generate data to use as "gibberish," periodically
grabbing a byte or two from /dev/urandom or /dev/random to make it
behave a bit more randomly.

In addition, I'd suggest running this process multiple times, as it is
reputed that Those TLA Agencies are still able to pull data off if you
have only written over the disk once.

Of course, if you're really _serious_ about making this secure, you'd
want to use thermite to burn up the disk, grind it to powder, and then
mix it with thermite again...
-- 
(concatenate 'string "cbbrowne" "@ntlug.org")
http://cbbrowne.com/info/
Time is the best teacher; Unfortunately it kills all its students.
Technical Details
Message-ID: <alil7b$1qm7an$1@ID-125932.news.dfncis.de>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!fu-berlin.de!uni-berlin.de!hse-mtl-ppp74279.qc.sympatico.CA!not-for-mail
References: <3d7cd0f2$0$25296$91cee783@newsreader01.highway.telekom.at>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 1041dd,28c4c3b7567c439e
X-Google-Attributes: gid1041dd,public
X-Google-Thread: 111514,28c4c3b7567c439e
X-Google-Attributes: gid111514,public
X-Google-Thread: fc814,28c4c3b7567c439e
X-Google-Attributes: gidfc814,public
X-Google-Thread: 100c5f,28c4c3b7567c439e
X-Google-Attributes: gid100c5f,public
X-Google-Thread: 106e9e,28c4c3b7567c439e
X-Google-Attributes: gid106e9e,public
X-Google-ArrivalTime: 2002-09-09 10:19:41 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!fu-berlin.de!uni-berlin.de!hse-mtl-ppp74279.qc.sympatico.CA!not-for-mail
From: Christopher Browne <cbbrowne@acm.org>
Newsgroups: alt.linux,alt.os.linux.suse,at.tuwien.lva.se-linux,comp.os.linux.security,comp.security
Subject: Re: random or urandom???
Date: 9 Sep 2002 17:19:40 GMT
Organization: cbbrowne Computing Inc
Lines: 34
Message-ID: <alil7b$1qm7an$1@ID-125932.news.dfncis.de>
References: <3d7cd0f2$0$25296$91cee783@newsreader01.highway.telekom.at>
NNTP-Posting-Host: hse-mtl-ppp74279.qc.sympatico.ca (64.229.208.56)
X-Trace: fu-berlin.de 1031591980 61545815 64.229.208.56 (16 [125932])
X-Draft-From: ("nnvirtual:Linux" 3454)
X-Home-Page: http://www.cbbrowne.com/info/
X-Emacs-Acronym: Escape Meta Alt Control Shift
Microsoft: Programs so large they have weather.
X-Uboat-Death-Message:
   ANNOYED BY ATOMIC BOMB. TORPEDOS. ENGAGING PLOT DEVICE. U-376.