Article View: alt.linux
Article #187Re: random or urandom???
From: Lee Sau Dan
Date: Tue, 10 Sep 2002 12:40
Date: Tue, 10 Sep 2002 12:40
29 lines
2667 bytes
2667 bytes
>>>>> "Christopher" == Christopher Browne <cbbrowne@acm.org> writes:
Christopher> I would suggest a _third_ possibility, namely that
Christopher> you set up your own cryptographically-strong RNG
Christopher> (there's lots of them out there to choose from),
Christopher> using it to generate data to use as "gibberish,"
Christopher> periodically grabbing a byte or two from /dev/urandom
Christopher> or /dev/random to make it behave a bit more randomly.
For seeding an RNG and doing it just occasionally, I think /dev/random
would be better. (Are there any good reasons to use /dev/urandom in
this case?)
Christopher> In addition, I'd suggest running this process
Christopher> multiple times, as it is reputed that Those TLA
Christopher> Agencies are still able to pull data off if you have
Christopher> only written over the disk once.
Yeah! That's why I think using /dev/urandom for 6 passes would be
better than doing /dev/random 3 times. And the former is much faster!
--
Lee Sau Dan ���u��(Big5) ~{@nJX6X~}(HZ)
E-mail: danlee@informatik.uni-freiburg.de
Home page: http://www.informatik.uni-freiburg.de/~danlee
Technical Details
Message-ID:
<m3d6rmm9mi.fsf@mika.informatik.uni-freiburg.de>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsmi-us.news.garr.it!NewsITBone-GARR!area.cu.mi.it!newsfeeder.edisontel.com!nntp.infostrada.it!newsfeed01.sul.t-online.de!t-online.de!news.belwue.de!news.uni-freiburg.de!not-for-mailReferences:
<3d7cd0f2$0$25296$91cee783@newsreader01.highway.telekom.at> <alil7b$1qm7an$1@ID-125932.news.dfncis.de>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII X-Google-Thread: 1041dd,28c4c3b7567c439e X-Google-Attributes: gid1041dd,public X-Google-Thread: 111514,28c4c3b7567c439e X-Google-Attributes: gid111514,public X-Google-Thread: 100c5f,28c4c3b7567c439e X-Google-Attributes: gid100c5f,public X-Google-Thread: fc814,28c4c3b7567c439e X-Google-Attributes: gidfc814,public X-Google-Thread: 106e9e,28c4c3b7567c439e X-Google-Attributes: gid106e9e,public X-Google-ArrivalTime: 2002-09-10 05:45:03 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsmi-us.news.garr.it!NewsITBone-GARR!area.cu.mi.it!newsfeeder.edisontel.com!nntp.infostrada.it!newsfeed01.sul.t-online.de!t-online.de!news.belwue.de!news.uni-freiburg.de!not-for-mail From: Lee Sau Dan <danlee@informatik.uni-freiburg.de> Newsgroups: alt.linux,alt.os.linux.suse,at.tuwien.lva.se-linux,comp.os.linux.security,comp.security Subject: Re: random or urandom??? Date: 10 Sep 2002 20:40:05 +0800 Organization: Rechenzentrum der Universitaet Freiburg, Germany Lines: 29 Message-ID: <m3d6rmm9mi.fsf@mika.informatik.uni-freiburg.de> References: <3d7cd0f2$0$25296$91cee783@newsreader01.highway.telekom.at> <alil7b$1qm7an$1@ID-125932.news.dfncis.de> NNTP-Posting-Host: camaro.informatik.uni-freiburg.de Mime-Version: 1.0 Content-Type: text/plain; charset=cn-big5 Content-Transfer-Encoding: 8bit User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7