3 ms·
> Using poor sources of entropy like /dev/urandom on Linux, or worse, gettimeofday(), and using them to generate long-lived keys. He missed the point, people c
by nimbs 12y ago
> Using poor sources of entropy like /dev/urandom on Linux, or worse, gettimeofday(), and using them to generate long-lived keys.
He missed the point, people complained because he claimed urandom was a poor source of entropy. That post is about using urandom securely, and he even shows that he doesn't know the difference between random and urandom.
- smn35 12y agoI think you missed what he was saying. He phrased it a few different ways in the blog and the comments, the clearest probably being: "(/dev/urandom || gettimeofday()) is a very poor source of entropy". He was complaining about a particular usage he was seeing in the wild, not random and urandom, as he explicitly says a few times.