Donald Stufft added the comment:

No we should not use /dev/random (or GRND_RANDOM(. It's numbers are not "more 
random" than /dev/urandom outside of the narrow window of prior to /dev/urandom 
being fully seeded. In fact, on Linux both /dev/urandom and /dev/random use the 
exact same CSPRNG the only difference is that /dev/random does some snake oil 
to try and guess "how much random" is left (which experts widely agree is a 
load of manure) and will block randomly (pun intended) throughout the running 
of the system whenever it's snakeoil decides that it's "random is running low".

I know what the manpage says, it's basically an urban myth, unchanged largely 
because of political pressure

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue27297>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to