Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Jun 2000 15:07:03 -0500
From:      "Jacques A . Vidrine" <n@nectar.com>
To:        Leif Neland <leif@neland.dk>
Cc:        freebsd-current@FreeBSD.ORG
Subject:   Re: HEADS UP! New (incomplete) /dev/random device!
Message-ID:  <20000626150703.A524@bone.nectar.com>
In-Reply-To: <002501bfdf78$f3b41c40$0e00a8c0@neland.dk>; from leifn@neland.dk on Mon, Jun 26, 2000 at 04:09:26PM %2B0200
References:  <200006251512.RAA17563@grimreaper.grondar.za> <Pine.BSF.4.21.0006251252550.42497-100000@freefall.freebsd.org> <20000626082516.C18421@bone.nectar.com> <002501bfdf78$f3b41c40$0e00a8c0@neland.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 26, 2000 at 04:09:26PM +0200, Leif Neland wrote:
> How much does this "unrandomness" matter?

That's why I said `depending on the application'.

It probably doesn't matter too much for a Kerberos session key that will
be used for the duration of an ftp session.

It definately matters if you just generated a keytab to use for your new
server, and you use that key for the lifetime of your server (not
atypical).

> How often are keys generated? If only once per program, then does it really
> matter if the keys are generated randomly or from my mothers maiden name?

Consult Schroedinger's cat.  Maybe it only `matters' if someone is
looking for weak keys in your environment. :-)
-- 
Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000626150703.A524>