search

neocturne / fastd

Fast and Secure Tunnelling Daemon
Other
115 stars 16 forks source link

patch: always use /dev/urandom #4

Closed cremesk closed 4 years ago

cremesk commented 4 years ago

Hi,

please can we use /dev/urandom per default?! Thanks

neocturne commented 4 years ago

/dev/urandom is generally unsuited for long-term key material, as it may return unseeded PRNG data on boot (a very real problems on embedded platforms which don't generate much entropy... I usually recommend to use haveged to seed the pool reasonably fast on such systems).

I would accept a patch switching to getrandom on platforms where it's available.

neocturne commented 4 years ago

Closing because of inactivity.