Re: Alternative to -rand option for genpkey

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2024-01-11 07:35, Raj via openssl-users wrote:
When generating private keys with `ecparam` or `genrsa` in OpenSSL, it is possible to use the parameter `-rand file.dat` where file.dat is used as additional seed for the RNG, as far as I understand.

I believe that if you give the option "-rand file.dat", then the RNG is seeded only from file.dat (i.e. it is not an additional seed -- it is the whole seed).

I would like to generate private Ed448 and Ed25519 keys with an additional random source provided as file. Is there a way to do that? I'm using version 3.1.0 btw.

You could try using a config file:

https://www.openssl.org/docs/manmaster/man5/config.html

Have a look at the "random" section and the info about setting the variable "seed".

-James M



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux