Re: Marek Novotny GnuPG

From	"Carlos E.R." <robin_listas@invalid.es>
Newsgroups	alt.os.linux
Subject	Re: Marek Novotny GnuPG
Date	2016-09-28 00:04 +0200
Organization	Aioe.org NNTP Server
Message-ID	<407rbd-q3a.ln1@Telcontar.valinor> (permalink)
References	(4 earlier) <e4sjjlFisebU1@mid.individual.net> <e4vs0pFcqlbU1@mid.individual.net> <e4vt14Fd29lU1@mid.individual.net> <nsefjp$a1p$11@news.albasani.net> <e4vv3dFdig5U1@mid.individual.net>

Show all headers | View raw

On 2016-09-27 21:20, Mike Easter wrote:
> Melzzzzz wrote:
>> Mike Easter wrote:
> 
>>> The article suggests:
>>>
>>> sudo rngd -r /dev/urandom
>>>
>> What's wrong with /dev/random ?
>>
> If you are asking me why the article recommended urandom instead of
> random, I don't know the answer (yet) and he didn't say.

If there is not enough entropy "/dev/random" waits till there is. On the
other hand, "/dev/urandom" doesn't wait. The man page says: «As a
result, if there is not sufficient entropy in the entropy pool, the
returned values are theoretically vulnerable to a cryptographic attack
on the algorithms used by the driver.  Knowledge of how to do this is
not  available in  the  current  unclassified  literature,  but it is
theoretically possible that such an attack may exist.  If this is a
concern in your application, use "/dev/random" instead.»

So, for practical purposes, urandom is preferred. For applications where
you must be absolutely sure of the true randomness of the data, then use
"random".

The man page says «If  you  are  unsure  about  whether you should use
/dev/random or /dev/urandom, then probably you want to use the latter.
As a general rule, /dev/urandom should be used for everything except
long-lived GPG/SSL/SSH keys.»

-- 
Cheers, Carlos.

Thread

Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 00:00 +0000
  Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-25 17:32 -0700
    Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 01:04 +0000
    Re: Marek Novotny GnuPG The Letter Q <babbaquimby@teachers.org> - 2016-09-26 11:12 -0400
  Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 03:56 +0200
  Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 10:53 +0000
    Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:10 -0700
      Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:22 -0700
        Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 05:45 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 10:10 -0700
            Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 10:54 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 11:27 -0700
            Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 18:40 +0000
            Re: Marek Novotny GnuPG Bit Twister <BitTwister@mouse-potato.com> - 2016-09-27 18:41 +0000
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 12:06 -0700
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 10:14 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 10:38 -0700
            Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 11:44 -0700
              Re: Marek Novotny GnuPG Melzzzzz <Melzzzzz@zzzzz.com> - 2016-09-27 19:00 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 12:20 -0700
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 00:04 +0200
                Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-27 23:21 +0100
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 15:35 -0700
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 00:44 +0200
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 15:58 -0700
            Re: Marek Novotny GnuPG "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2016-09-27 19:24 -0400
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 01:06 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 10:38 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 11:21 -0700
            Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 10:31 +0000
              Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 11:24 +0000
                Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-28 16:08 +0200
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 19:55 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 13:11 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-28 22:04 +0000
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-28 16:11 -0700
        Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:27 +0000
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 06:59 -0700
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:25 +0000
    Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 15:26 +0200
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:33 +0000
        Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 15:40 +0200
          Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 13:48 +0000
      Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-26 14:39 +0100
        Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 07:00 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 07:26 -0700
            Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 14:53 +0000
            Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 14:59 +0000
              Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 15:01 +0000
            Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 07:34 -0700
              Re: Marek Novotny GnuPG Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-26 18:24 +0200
                Re: Marek Novotny GnuPG Snit <usenet@gallopinginsanity.com> - 2016-09-26 09:30 -0700
        Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 16:31 +0200
          Re: Marek Novotny GnuPG Richard Kettlewell <invalid@invalid.invalid> - 2016-09-26 15:59 +0100
            Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-26 19:45 +0200
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 14:29 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 14:37 -0700
                Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:17 -0700
                Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 23:27 +0000
        Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:00 -0700
          Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-26 15:34 -0700
            Re: Marek Novotny GnuPG "Carlos E.R." <robin_listas@invalid.es> - 2016-09-27 15:58 +0200
              Re: Marek Novotny GnuPG Mike Easter <MikeE@ster.invalid> - 2016-09-27 07:11 -0700
    Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 14:14 +0000
      Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 14:57 +0000
        Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 15:09 +0000
          Re: Marek Novotny GnuPG Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 15:14 +0000
          Re: Marek Novotny GnuPG Dan Purgert <dan@djph.net> - 2016-09-26 15:18 +0000

csiph-web