On 24.09.19 10:58, Matthias St. Pierre wrote:
It would also make sense to make the entropy sources themselves fetchable and 
configurable.  This would enable us to

- separate FIPS and non-FIPS entropy sources (using the 'fips' attribute)

This concept would also enable us to ensure that FIPS DRBGs can only seed from 
FIPS entropy sources, without having to
hardcode the list of approved entropy sources.

Matthias


Reply via email to