/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.2uo.de
Myths about /dev/urandom
| | blog.cryptographyengineering.com
RSA warns developers not to use RSA products - A Few Thoughts on Cryptographic Engineering
3.5 parsecs away

Travel
| | In today's news of the weird, RSA (a division of EMC) hasrecommendedthat developers desist fromusingthe (allegedly) 'backdoored' Dual_EC_DRBG random number generator -- which happens to be thedefault in RSA's BSafe cryptographic toolkit. Youch. In case you're missing the story here, Dual_EC_DRBG (which I wrote about yesterday) is the random number generator voted most likely to...
| | www.thomas-huehn.com
Myths about /dev/urandom
0.0 parsecs away

Travel
| | [AI summary] The article discusses the use of /dev/random and /dev/urandom in Linux systems for generating random numbers. It highlights that /dev/urandom is generally preferred over /dev/random due to its non-blocking nature and sufficient cryptographic security. The article also addresses misconceptions in the man pages and emphasizes that /dev/urandom is safe for most applications, including cryptographic uses, as long as the initial seeding is done properly. It mentions that while /dev/random is considered a legacy interface, it's not always necessary, and modern Linux distributions and syscalls like getrandom(2) provide better alternatives.
| | paragonie.com
How to Securely Generate Random Strings and Integers in PHP - Paragon Initiative Enterprises Blog
3.1 parsecs away

Travel
| | A lesson on cryptographically secure pseudorandom number generators in PHP, and how to generate random integers and strings from a high quality entropy source like /dev/urandom to generate secure random passwords in PHP.
| | rdist.root.org
Smart meter crypto flaw worse than thought - rdist
29.8 parsecs away

Travel
| Travis Goodspeed has continued finding flaws in TI microcontrollers, branching out from the MSP430 to ZigBee radio chipsets. A few days ago, he posted a flaw in the random number generator. Why is this important? Because the MSP430 and ZigBee are found in many wireless sensor systems, including most Smart Meters. Travis describes two flaws:...