Timeline for Does using a snapshot of running PID on Linux provide enough entropy?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 20, 2016 at 23:42 | vote | accept | Joseph Shih | ||
| Dec 20, 2016 at 23:42 | |||||
| Dec 20, 2016 at 23:40 | comment | added | Joseph Shih |
Thanks. Is $RANDOM weaker than /dev/urandom?
|
|
| Dec 20, 2016 at 20:49 | comment | added | John Deters | What are you using the string for? You say "random token" but don't explain the attributes of the token. In any case, this looks like a very weak source of entropy, one I wouldn't recommend for security purposes. As @bkjvbx said, just use /dev/urandom, which is exactly what it's for. | |
| Dec 20, 2016 at 18:44 | answer | added | Maarten Bodewes♦ | timeline score: 2 | |
| Dec 20, 2016 at 9:04 | comment | added | bkjvbx | Neither $RANDOM nor PIDs are a cryptographically secure source of random numbers. | |
| Dec 20, 2016 at 8:58 | comment | added | bkjvbx |
Enough entropy for what? Why not just use /dev/urandom?
|
|
| Dec 20, 2016 at 8:14 | review | First posts | |||
| Dec 20, 2016 at 14:22 | |||||
| Dec 20, 2016 at 8:10 | history | asked | Joseph Shih | CC BY-SA 3.0 |