[Help-gnutls] Re: Alternate random device for certtool

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Dec 8 09:53:01 CET 2008


On Fri, Dec 05, 2008 at 10:06:38PM +0200,
 Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote 
 a message of 66 lines which said:

> There are many parts in a typical PC that can feed a prng with
> non-deterministic data. Typical examples are the network card and
> sound card (mic etc), hard disks, memory accesses, interrupts,
> thermal sensors etc.

Not all are equal. See RFC 4086 <http://www.ietf.org/rfc/rfc4086.txt>
for a discussion of why the hard disk is better than the network card.





More information about the Gnutls-help mailing list