> Unless you're very concerned about entropy, I'd be happy with the > stuff that OpenSSL finds on it's own.
I haven't looked at the source recently - what sources are searched on Windows by default? In the environments I'm used to, the screen is static (the machine is headless anyway) and the processes running are always the same (though characteristics such as CPU time change, etc) Worse yet, I just helped out in porting a bit of code to WinCE, and I have no idea what's available for it wrt randomness. -- Brian Hatch "How many of you would spend Systems and $500 on a piece of software Security Engineer with over 63,000 potential http://www.ifokr.org/bri/ known defects?" --MS VP Allchin Re: Windows 2K Every message PGP signed
pgp00000.pgp
Description: PGP signature
