Re: GnuTLS -- certtool

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andrew Bartlett <abartlet@xxxxxxxxx> writes:

> GnuTLS's egregious use of blocking /dev/random is indeed one of the more
> annoying things about this crypto package...

The alternative is to invent entropy that isn't there, and I don't
particularly like that option.

I wish the kernel would be more aggressive in grabbing entropy, but
there's a lot of fear that e.g. network entropy can be predicted. A
box without hard drive and keyboard/mouse is pretty much doomed as it
is. Maybe the kernel should generate pseudo-random hard drive seeks
when entropy runs out and disks are otherwise idle.


/Benny


-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux