153 reputation
17
bio website coinbase.com
location San Francisco, CA
age 31
visits member for 1 year
seen Oct 22 '13 at 5:27

Co-founder and CEO of https://coinbase.com

Personal blog at http://brianarmstrong.org

Lover of software engineering.


Jul
15
awarded  Nice Question
Apr
3
awarded  Notable Question
Nov
5
awarded  Popular Question
Oct
22
comment What to watch for with openssl generating weak keys? (low entropy)
This is a remote server. Imagine it is something like $10M per key, with a 10 year lifetime.
Jul
25
awarded  Scholar
Jul
25
accepted What to watch for with openssl generating weak keys? (low entropy)
Jul
25
comment What to watch for with openssl generating weak keys? (low entropy)
dd if=/dev/random bs=1 count=128 of=$HOME/.rnd looks interesting (the hack you mentioned in your answer). It does seem to block for quite some time (~5 seconds) on my machine for 128 bytes. So do you feel this would be sufficient for long term keys that needed more security?
Jul
25
awarded  Supporter
Jul
25
comment What to watch for with openssl generating weak keys? (low entropy)
Wow, I regret I have but one upvote to give! Really appreciate this answer. I will re-reread it again tonight and may have some follow up questions. This is great.
Jul
24
comment What to watch for with openssl generating weak keys? (low entropy)
So given a private key/public key (and possibly some signatures it generated), is there any way to determine if it was generated using low entropy?
Jul
24
awarded  Student
Jul
24
comment What to watch for with openssl generating weak keys? (low entropy)
@CodesInChaos ok good distinction, thanks for the help. Does openssl block on startup in the way you described? I'm guessing a VM booting up doesn't have any state stored from previous shutdown or anything like that. Wondering how long it would take to get that 256 bits of entropy in practice on a server with no mouse/keyboard. A few seconds? Minutes? Thanks!
Jul
24
awarded  Editor
Jul
24
revised What to watch for with openssl generating weak keys? (low entropy)
added 21 characters in body
Jul
24
asked What to watch for with openssl generating weak keys? (low entropy)
Jul
24
awarded  Autobiographer