On Feb 14, 2014 10:30 PM, "Jakub Zelenka" <[email protected]> wrote:
> The point is that OpenSSL considers /dev/urandom strong enough for
seeding CSPRNG.
The point here is about whether /Dev/urandom is cs or not. It is not. It
may be (on recent updated systems) enough to be used as seed but not to
actually generate cs random data.
Also it is important to keep mind that openssl does more than simply read
from urandom or random to generate data. That's outside the scope of what
is proposed here.
Cheers,
Pierre