3 ms·
Making the pool larger isn't sufficient for embedded systems that don't have a lot of sources of entropy in the first place. Especially since very often the mo
by tytso 13y ago
Making the pool larger isn't sufficient for embedded systems that don't have a lot of sources of entropy in the first place. Especially since very often the most critical secrets (such as the RSA keys for the certificates used by network printers, for example) are generated when the embedded system is first installed, where even if you have a larger pool, there isn't any opportunity to fill with the extremely limited amount of entropy available to said device.
- raverbashing 13y agoYes, this is very bad in embedded systems As in your example, the only source of entropy a network printer has: network data, easy to manipulate or even no activity. So no way to generate keys for example. In some cases hardware sources are a must. Yes, in the end you'll need to trust them