Re: Beware of /dev/random on Mac OS X

2003-09-02 Thread Michael Shields
In message [EMAIL PROTECTED], Peter Hendrickson [EMAIL PROTECTED] wrote: Apple apparently only accepts bug reports from members of the Apple Developers Connection. If any such members are on this list, it might be a good idea to submit a report:

Beware of /dev/random on Mac OS X

2003-08-29 Thread Peter Hendrickson
It's a /dev/urandom which has been labeled /dev/random. It claims to be a Yarrow implementation so is presumably only 160 bits strong. (See http://www.counterpane.com/yarrow-notes.html.) From http://www.hmug.org/man/4/urandom.html: /dev/urandom is a compatibility nod to Linux. On Linux,

Re: Beware of /dev/random on Mac OS X

2003-08-29 Thread Tim Dierks
At 05:01 PM 8/28/2003, Peter Hendrickson wrote: First, the entropy pool in Yarrow is only 160 bits. From Section 6 Open Questions and Plans for the Future of the Yarrow paper referenced above: Yarrow-160, our current construction, is limited to at most 160 bits of security by the size of its