[openssl-users] PRNG is not seeded

Salz, Rich rsalz at akamai.com
Wed May 30 01:38:28 UTC 2018


>I know this is caused by a lack of available entropy in the system; but what can I do to address this?  Is it just a matter of waiting until enough entropy has been collected?  Is there any kind of workaround?

Assuming you don’t have another source of randomness that you can add in, then you should wait.  IF you don’t, you run the risk that your random numbers (session keys, RSA or other long-term keys, etc) could be guessed by an attacker.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180530/73a29499/attachment-0001.html>


More information about the openssl-users mailing list