Hi, Grant, Grant Edwards <[EMAIL PROTECTED]> wrote:
> I've been googling to find some source > material on practical aspects of maintaining an entropy pool, > but so far haven't found much of anything. Maybe you can ask in the UseNet Newsgroup sci.crypt (after assuring that their FAQ doesn't contain some useful pointers). Also, libtomcrypt or the CryptoPP lib may contain entropy code. OpenSSL / GnuTLS definitely have, but they both are rather heavyweight. And "Applied Cryptography" by Bruce Schneier, and "Cryptograpyh for developers" by Tom St. Denis may be worth a look. There are also some recent articles analyzing the entropy pools from Linux, BSDish Systems and Windows, where some weaknesses showed up. Cryptography is a field of mines, and most ad-hoc implementations by non-experts turn out to be severely broken some time after deployment. Regards, Markus -- Markus Schaber | Logical Tracking&Tracing International AG Dipl. Inf. | Software Development GIS Fight against software patents in Europe! www.ffii.org www.nosoftwarepatents.org -- Before posting, please read the FAQ: http://ecos.sourceware.org/fom/ecos and search the list archive: http://ecos.sourceware.org/ml/ecos-discuss
