Re: /dev/urandom too slow on my system



Rainer Temme wrote:
If your random block is large enough, the compression
protocol in the vpn routers (very likely IP-COMP if
IPsec is involved) will not be able to take any
advantage of it.

If it is IP-COMP, then according to RFC 2393,

'Each IP datagram is compressed and decompressed by itself without any
relation to other datagrams ("stateless compression"), as IP
datagrams may arrive out of order or not arrive at all.'

In this case, you need only have a sequence of random bytes as large
as the largest possible datagram. So, not very large.

- Logan
.