4 ms·
1. /etc/ssh/sshd_config: UseDNS no 2. If haveged isn't perfect enough, setup a hw TRNG (i.e., EntropyKey, BitBabbler, InfiniteNoise) and EGD or EntropyBroker.
by dfeojm-zlib 7y ago
1. /etc/ssh/sshd_config: UseDNS no
2. If haveged isn't perfect enough, setup a hw TRNG (i.e., EntropyKey, BitBabbler, InfiniteNoise) and EGD or EntropyBroker.
https://everipedia.org/wiki/lang_en/Comparison_of_hardware_random_number_generators https://everipedia.org/wiki/lang_en/Comparison_of_hardware_r...
http://egd.sourceforge.net http://egd.sourceforge.net
https://www.vanheusden.com/entropybroker https://www.vanheusden.com/entropybroker
3. It maybe something else.
- emmelaich 7y ago> UseDNS no Is not sufficient by itself to never have any part of the ssh connection and authentication not use DNS. See https://unix.stackexchange.com/questions/56941/what-is-the-point-of-sshd-usedns-option https://unix.stackexchange.com/questions/56941/what-is-the-p... and https://serverfault.com/questions/576293/sshd-tries-reverse-dns-lookups-with-usedns-no https://serverfault.com/questions/576293/sshd-tries-reverse-...
- jwilk 7y agoAnd "UseDNS no" is the default anyway.