Mailing List Archive

FW: RES: Secure connections
Here's a fun one:
http://lavarand.sgi.com/

This one's a little more practical:

http://www.fourmilab.ch/hotbits/

> -----Original Message-----
> From: phil@Stimpy.netroedge.com [mailto:phil@Stimpy.netroedge.com]
> Sent: Thursday, April 20, 2000 3:00 PM
> To: Leiradella, Andre V Matos Da Cunha; gnupg-users@gnupg.org
> Subject: Re: RES: Secure connections
>
>
>
> Almost related: For machines which do a lot of encrypting based on
> random numbers (VPN routers, SSL web servers, etc.), are there
> hardware products which can produce lots of high-quality random
> numbers? The kernel /dev/random works well, but sometimes it can run
> out of data, and the server will lag.
>
> I'm interested in what you people think.
>
>
> Phil
>
> On Thu, Apr 20, 2000 at 02:35:37PM -0300, Leiradella, Andre V
> Matos Da Cunha wrote:
> > Sorry, I didn't made myself clear.
> >
> > I know I can generate key pairs and encrypt/decrypt files using
> the command
> > line. What I really need is the C functions witch do it, so I
> can link them
> > into my programs.
> >
> > About the random number generation, don't get me wrong. I'm
using Linux
> > 2.2.12 and I know /dev/random is ok, but so much is talked
about random
> > numbers when it comes to key generation that I thought I needed
> something
> > more than it.
>
> --
> Philip Edelbrock -- IS Manager -- Edge Design, Corvallis, OR
> phil@netroedge.com -- http://www.netroedge.com/~phil
> PGP F16: 01 D2 FD 01 B5 46 F4 F0 3A 8B 9D 7E 14 7F FB 7A
>
>
Re: FW: RES: Secure connections [ In reply to ]
On Tue, 9 May 2000, Eric J. Gustafson wrote:

> Here's a fun one:
> http://lavarand.sgi.com/
>
> This one's a little more practical:
>
> http://www.fourmilab.ch/hotbits/

Getting random via a network connection is a bad idea - many folks are
then able to sniff it. Okay, gpg's RNG is not compromised becuase it
takes it entropy from more than one source - but it does not make much
sense to add these. You are doing serious encryption on a networked
box? Tsssss :-)

Werner

--
Werner Koch OpenPGP key 621CC013
OpenIT GmbH tel +49 211 239577-0
Birkenstr. 12 email wk@OpenIT.de
D-40233 Duesseldorf http://www.OpenIT.de