6 ms·
As opposed to have everybody implement his/her own random()/entropy().
by leccine 12y ago
As opposed to have everybody implement his/her own random()/entropy().
- awj 12y ago...the NSA would love that most of all. The vast majority of programmers lack the knowledge, skill, or both required to correctly implement anything related to cryptography.
- leccine 12y ago"The vast majority of programmers lack the knowledge, skill, or both required to correctly implement anything." Agreed.
- agwa 12y agoWho's "everybody?" If you mean userspace application/library developers, they don't have a good source of entropy, so they have to get it from the kernel. That means userspace CSPRNGs end up depending on the kernel CSPRNG. Presto, two single points of failure!
- leccine 12y agoI see, so prior to this random() and entropy() addition to Linux nobody could ever write any security related application. Yes, this is true. We should change the pull request to "Enable security for Linux, 2014". God, never too late...