I would like to know your opinions on commercial hardware random number
generators. Are they worth the money? How do they compare to the
/dev/random device? Thnx.
__
OpenSSL Project
Wai Wu wrote:
I would like to know your opinions on commercial hardware random number
generators. Are they worth the money? How do they compare to the
/dev/random device? Thnx.
I've written extensively about this elsewhere. The devices are properly
termed RBGs (random bit generators), and
excellent source of random data available to you
I thought consensus was that since it was a closed system,
whiten it or use it as input to entropy.
This is what OpenSSL does when you use RAND_screen(). It munges it up
numerous items, including the PRNG, through a cryptographic hash (MD5
Did you know that many of the new Intel desktop and server
chipsets have a built in Hardware Random Number generator? I did not until a
while ago. If your computer uses the Intel 815 chipset, Intel 820
chipset, Intel 840 chipset, Intel 850 chipset, or Intel 860
chipset you have a excellent
excellent source of random data available to you
I thought consensus was that since it was a closed system, whiten it or
use it as input to entropy.
/r$
--
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com
to the Intel rng
device.
Rya
-Original Message-
From: Rich Salz [mailto:[EMAIL PROTECTED]]
Sent: Saturday, September 08, 2001 1:38 PM
To: Ryan Hurst
Cc: Openssl-Dev ([EMAIL PROTECTED]); Openssl-Users
([EMAIL PROTECTED])
Subject: Re: OpemSSL Hardware Random Number Generator (RNG) for Intel
Chipsets
I am not sure I understand what you are saying
You called the intel h/w rng excellent. I believe consensus is we
don't know.
The code you showed does exactly the right thing: don't rely on the h/w
RNG directly, but use it as an entropy source.
/r$
--
Zolera Systems, Securing
, 2001 7:36 PM
To: Ryan Hurst
Cc: Openssl-Dev ([EMAIL PROTECTED]); Openssl-Users
([EMAIL PROTECTED])
Subject: Re: OpemSSL Hardware Random Number Generator (RNG) for Intel Chip
sets.
I am not sure I understand what you are saying
You called the intel h/w rng excellent. I believe consensus
and of the afore mentioned items.
Ryan
-Original Message-
From: Ryan Hurst [mailto:[EMAIL PROTECTED]]
Sent: Saturday, September 08, 2001 7:42 PM
To: 'Rich Salz'
Cc: Openssl-Dev ([EMAIL PROTECTED]); Openssl-Users
([EMAIL PROTECTED])
Subject: RE: OpemSSL Hardware Random Number Generator (RNG
