> If you're a level 500 elite hacker like I am, you will note that the cryptographic quality of numbers from /dev/urandom is not the same as numbers from /dev/

> If you're a level 500 elite hacker like I am, you will note that the cryptographic quality of numbers from /dev/urandom is not the same as numbers from /dev/random. In our case, we don't want this operation to block, so we use /dev/urandom. This is wrong. See http://www.2uo.de/myths-about-urandom/ http://www.2uo.de/myths-about-urandom/ (The part about /dev/urandom not blocking is right though) Edit: changed http://security.stackexchange.com/questions/3936/is-a-rand-from-dev-urandom-secure-for-a-login-key http://security.stackexchange.com/questions/3936/is-a-rand-f... to the current link, since the current link is more to the point.