[Bug 970009] Review Request: stoken - Token code generator compatible with RSA SecurID 128-bit (AES) token

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=970009

--- Comment #23 from David Woodhouse <dwmw2@xxxxxxxxxxxxx> ---
Hm.

For an application the question is a bit simpler. If the app needs to generate
random numbers often and fast, then using rdrand directly is the way to go.
Otherwise, just use the library and don't worry about it.

However, it's a bit harder for the library. I suppose it wants to be optional,
and the distribution packager needs to do the right thing. Or perhaps this is
just another case of Debian and Ubuntu being a bit behind the curve. We update
the libraries to assume that rngd is doing it, and when we finally have current
software in .deb form it'll all work out OK.

Getting back vaguely on-topic... it occurs to me that stoken could probably
just open /dev/random and read from it to get a random number. You don't do
this often, right? It's only for 'stoken import --random'? And thus it is
/dev/random not /dev/urandom that you need?

In that case I could have just used nettle instead of gnutls, and not had to
worry about the library initialisation issues.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=O4179VOD53&a=cc_unsubscribe
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review





[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]