anyone using security/dropbear?

[Doug Barton]

Brian Reichert wrote:
> On Thu, Sep 29, 2005 at 02:14:13PM -0400, Kris Kennaway wrote:
> 
>>Check the source.. is it using /dev/urandom (which never blocks), or
>>/dev/random (which I still don't think blocks, but may return short
>>reads).  Either way, it sounds like some level of application bug...it
>>probably should be using the former source, but even if it's not, it
>>shouldn't be blocking.
> 
> 
> ktrace shows /dev/random, and indeed, very short reads.
> 
> Let me try another maunal build, pushing it to /dev/urandom.

Depending on why that program needs random bits, that could be a very bad 
idea. Take a look at the following page and see if it helps:

http://people.freebsd.org/~dougb/randomness.html


-- 

     This .signature sanitized for your protection