I am not rolling my own crypto or anything - just trying to learn about the Dos and Don'ts of cryptography: specifically about AES encryption and ways to generate keys for that.
As far as I've understand, one of the options when creating
cryptographically secure keys would be to gather entropy from
/dev/urandom and then feed that data through the Salsa20 cipher.
However I am not quite sure about the next steps, because that’s where search engines stop being useful to me. From what I understand, using the output Salsa20 generates doesn’t seem to be secure enough to be used as key material as-is. If that's correct, what would be the "cryptographically" correct next step after getting the Salsa20 output?
Also, if you know of any relevant papers and are happy to share, they would be very welcome!