> On 18 Feb 2019, at 21:50, Didier Kryn <k...@in2p3.fr> wrote:
>
>> Le 17/02/2019 à 17:29, Mike Tubby a écrit :
>> If you install 'haveged' package /dev/random and /dev/urandom should (a) be
>> better quality and (b) programs that need chunks of random data such as SSL
>> on start-up should come up more quickly, i.e. not block waiting
>
>
> Looks kije a great suggestion. I'd never heared of it.
>
> Shouldn't this package be recommended, or at least suggested, by things
> like openssl and openssh ?
The quality of entropy from haveged is not guaranteed.
https://security.stackexchange.com/questions/34523/is-it-appropriate-to-use-haveged-as-a-source-of-entropy-on-virtual-machines
https://lwn.net/Articles/525459/
Maybe rng tools might be a better option if you are low on entropy? I don’t
claim to be an expert on security or crypto though.
https://wiki.archlinux.org/index.php/Rng-tools
—Tom
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
