How To Safely Generate A Random Number — Quarrelsome
Why not {SecureRandom, OpenSSL, havaged, &c}?
These are userspace CSPRNGs. You want to use the kernel's CSPRNG, because:
The kernel has access to raw device entropy.
It can promise not to share the same state between applications.
A good kernel CSPRNG, like FreeBSD's, can also promise not to feed you random data before it's seeded.
Read full article from How To Safely Generate A Random Number — Quarrelsome
No comments:
Post a Comment