I am working on a TLS PSK handler for DotNetty TCP server solution using Bouncy Castle for TLS PSK. A TLS PSK handler will be created for each connection--we are anticipating 10,000+. Should I share one SecureRandom object for all handlers for use in the TlsServerProcotol class, or should I create a new SecureRandom for each handler?
DotNetty creates a new handler on a thread for each new connection that is established. I am noticing that when I create a new SecureRandom object in the constructor of the handler it will never complete. What I am observing is in the ThreadedSeedGenerator class, the DoGenerateSeed function is stuck in what appears to be an infinite loop as the Run method is never hit to increase the counter. Any ideas on this behavior and how to fix it (assuming I should *not* share a SecureRandom object with *all *connections) would be greatly appreciated! Thanks for your time! Mat Robichaud p: 507.358.9419 e: matrobich...@gmail.com