On 24.09.19 10:58, Matthias St. Pierre wrote:
It would also make sense to make the entropy sources themselves fetchable and configurable. This would enable us to - separate FIPS and non-FIPS entropy sources (using the 'fips' attribute)
This concept would also enable us to ensure that FIPS DRBGs can only seed from FIPS entropy sources, without having to hardcode the list of approved entropy sources. Matthias