On 11 Dec 2012, at 3:27 PM, redpath wrote: > an RSA pair is created. Its not so much I want to know how a pair is randomly > selected but how secure is that random selection. Random number generators > are a series and this selection could be followed for brute force deciphering.
I think the random number source or sources are configured when OpenSSL is built or in openssl.cnf. On the systems I'm familiar with, IIRC, entropy is obtained from /dev/*random and used to seed a CPRNG. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
