[157355] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: best way to create entropy?

daemon@ATHENA.MIT.EDU (Aaron Toponce)
Tue Oct 16 18:56:53 2012

Date: Tue, 16 Oct 2012 16:56:36 -0600
From: Aaron Toponce <aaron.toponce@gmail.com>
To: nanog@nanog.org
In-Reply-To: <alpine.DEB.2.02.1210132310500.3517@ybpnyubfg>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--uQr8t48UFsdbeI+V
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Oct 13, 2012 at 11:11:20PM +0100, Jasper Wallace wrote:
> and with ekeyd-egd-linux you can distribute the entropy from an entropyke=
y=20
> over the net - great for giving vm some randomness.

You would then be interested in http://hundun.ae7.st. Server I setup just a
week or so ago doing this very thing. However, if using a server's random
data, it's important you mix it into your /dev/random device, rather than
using the data directly. After all, how can you trust the admin, that he's
not keeping track of which client is receiving which data?

--=20
=2E o .   o . o   . . o   o . .   . o .
=2E . o   . o o   o . o   . o o   . . o
o o o   . o .   . o o   o o .   o o o

--uQr8t48UFsdbeI+V
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: http://ae7.st/s/pgp

iQEcBAABCgAGBQJQfeYfAAoJEM55Ebf8BAiPu3cH/RTRYnio0kogg7K0yaZTbp4+
cjfnUsSxwM/sG/keQ2e6dApcTk0zhVKy4dTtlKY+uKWhlxlSDYDmu2jTi0jdDAE9
Go2RTb1ymHWpvXfXDIY4dYN8RW+Yz32/cUEM9qN9v7SqKkeVrNO7ifcHXoP3wFJA
dxYcB7kAldrR8WV7LqLhb8M/InkaMF47Kc1pJy+wz7KM4c74WxbPbLzbgmx27h6t
0oG/B6kw8gQuLTOezB3bc/PFGDnihg9eiwWSzrefuoesty7Zrk5dgA/pQIlnSfgX
JWJDcW+c+uMDjq23BSG3JQKMyxXiyN82piM0kIEDy2R6+r41uy8Z3AqN12VXX4M=
=CaCd
-----END PGP SIGNATURE-----

--uQr8t48UFsdbeI+V--


home help back first fref pref prev next nref lref last post