Speed and security of /dev/urandom

Benjamin Kaduk kaduk at MIT.EDU
Sat Jul 19 21:08:00 UTC 2014


On Sat, 19 Jul 2014, Mateusz Guzik wrote:

> I believe the idea here is to have reliable source for reseeding after
> fork.

I don't think that's quite right; there are issues in reliably detecting 
that fork has occurred and a reseed performed.
Always getting random bits from the kernel avoids the need to detect fork.

-Ben


More information about the freebsd-security mailing list