5 ms·
Extrapolating a little when you say you don't like openssl as a CSPRNG, do you mean you don't like any of the CSPRNGs or just the openssl one? For e.g. NIST spe
by yalogin 13y ago
Extrapolating a little when you say you don't like openssl as a CSPRNG, do you mean you don't like any of the CSPRNGs or just the openssl one? For e.g. NIST specified some CSPRNGs in the DSA specification.
You don't like them because the application might end believing it has more entropy than it really has or are there other reasons?
- tptacek 13y agoI don't like the OpenSSL CSPRNG in particular for the same reasons 'rwg cited. But more broadly, I don't like app-layer CPSRNGs. CSPRNGs are one thing that benefits from being centralized on the OS.