[124731] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: The perils of security tools

daemon@ATHENA.MIT.EDU (Philipp =?iso-8859-1?q?G=FChring?=)
Wed May 28 09:35:42 2008

From: Philipp =?iso-8859-1?q?G=FChring?= <pg@futureware.at>
To: Cryptography <cryptography@metzdowd.com>
Date: Wed, 28 May 2008 10:34:53 +0200
In-Reply-To: <20080527221420.GF6146@yuggoth.org>
X-MDaemon-Deliver-To: cryptography@metzdowd.com

Hi,

> (it doesn't just "slow down a lot"). Since /dev/random use depletes
> the pool directly, it is imperative that wasteful reads of this
> pseudo-device be avoided at all costs.=20

Yes. Still, some people are using fopen/fread to access /dev/random, which=
=20
does pre-fetching on most implementations I saw, so using open/read is=20
preferred for using /dev/random.

Implementations can be rather easily checked with strace.

Best regards,
Philipp G=FChring

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post