> What worries me is, as a user of OpenDNSSEC, is that it is not > transparent which entropy source is used. There might be an compile-time > or run-time option to Botan to influence or force the selection, but I'm > not an expert in Botan. >
OpenDNSSEC just uses an HSM. It has no knowledge of the entropy source. Any checks should thus go into SoftHSM which is the one using Botan. // Rickard
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
