Thank you Wim, I'll take a look to the notes you linked. And talking about the entropy pool, do you know where in the code is the entropy pool filled with more entropy? I'm doing some searches looking for /dev/u?random (I still need to invest more time on this though), but it would be great if you can put me on the way. Thank you, Best regards, On Mon, Aug 24, 2015 at 10:34 PM, Wim Lewis <wiml at omnigroup.com> wrote: > On Aug 24, 2015, at 11:33 AM, David Luengo L?pez <dluengo at rti.com> wrote: > > 439 #define DUMMY_SEED "...................." /* at least > MD_DIGEST_LENGTH */ > > 440 /* Note that the seed does not matter, it's just that > > 441 * ssleay_rand_add expects to have something to hash. */ > > 442 ssleay_rand_add(DUMMY_SEED, MD_DIGEST_LENGTH, 0.0); > > > > I don't know why the 0.0 parameter, since we are not adding anything > here I never get more entropy in the pool. Any explanation for this 0.0? > > Because there is actually no entropy in DUMMY_SEED --- it's a constant. > This piece of code is "stirring" the pool; it doesn't increase the amount > of entropy (unpredictability) in the pool, it just makes sure that all the > bits of the pool are equally unpredictable. Actual entropy must be added by > some other piece of code. > > > Anyone knows what does OPENSSL_SYS_VOS macro means? > > The notes from the patch from Paul Green adding randomness support for VOS > might have useful information for you: > > https://rt.openssl.org/Ticket/Display.html?id=2563&user=guest&pass=guest > > (I do not know enough about VxWorks or VOS to say whether defining > OPENSSL_SYS_VOS safely solves your problem, though it seems plausible) > > > _______________________________________________ > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users > -- [image: RTI] *David Luengo L?pez* -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150825/4fdf2b50/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 2461 bytes Desc: not available URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150825/4fdf2b50/attachment.png>
