excessive usage of /dev/random?

[Robert J. Hansen]

> I'd suggest looking into Yarrow or Fortuna, which are CSPRNG
> algorithms intended to be suitable for generating crypto keys.

Yarrow's troublesome to implement, in that it requires accurate
estimates of available entropy pools and how they refresh.  Fortuna has
a simpler design.  The Yarrow authors recommend using Fortuna, and one
of them has declared Yarrow will no longer receive support or updates.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3744 bytes
Desc: S/MIME Cryptographic Signature
URL: </pipermail/attachments/20150501/1acb7923/attachment.bin>