[openssl-dev] Work on a new RNG for OpenSSL

Salz, Rich rsalz at akamai.com
Fri Aug 18 20:10:02 UTC 2017


 
    The problem with /dev/urandom will go away sooner or later. All major
    platforms either have a CPRNG syscall for years or introduced one
    recently. BSD has getentropy(2) for a while, Windows has
    CryptGenRandom() and Linux has getrandom(2) since Kernel 3.2 and glibc 2.15.
    

Agreed.

And when we can make –with-rand-seed=syscall the default, then it will be  a happier place ☺



More information about the openssl-dev mailing list