Re: anyone using security/dropbear?

From: Doug Barton (dougb_at_FreeBSD.org)
Date: 09/29/05

  • Next message: Brian Reichert: "Re: anyone using security/dropbear?"
    Date: Thu, 29 Sep 2005 12:58:17 -0700
    To: Brian Reichert <reichert@numachi.com>
    
    

    Brian Reichert wrote:
    > On Thu, Sep 29, 2005 at 02:14:13PM -0400, Kris Kennaway wrote:
    >
    >>Check the source.. is it using /dev/urandom (which never blocks), or
    >>/dev/random (which I still don't think blocks, but may return short
    >>reads). Either way, it sounds like some level of application bug...it
    >>probably should be using the former source, but even if it's not, it
    >>shouldn't be blocking.
    >
    >
    > ktrace shows /dev/random, and indeed, very short reads.
    >
    > Let me try another maunal build, pushing it to /dev/urandom.

    Depending on why that program needs random bits, that could be a very bad
    idea. Take a look at the following page and see if it helps:

    http://people.freebsd.org/~dougb/randomness.html

    -- 
         This .signature sanitized for your protection
    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
    

  • Next message: Brian Reichert: "Re: anyone using security/dropbear?"