| |||||||||||||
Russell: Sources of Randomness for UserspaceRussell: Sources of Randomness for UserspacePosted Mar 30, 2012 4:18 UTC (Fri) by slashdot (guest, #22014)Parent article: Russell: Sources of Randomness for Userspace
An hash of the root/administrator password hash concatenated with the MAC address seems the best source to seed a cryptographically secure PNRG.
If it doesn't have enough randomness, the system is already insecure, and thus an attacker can just read the RNG state from memory regardless of randomness source.
The concatenation with the MAC address makes the RNGs of machines with the same password uncorrelated.
(Log in to post comments)
Russell: Sources of Randomness for Userspace Posted Mar 30, 2012 4:20 UTC (Fri) by josh (subscriber, #17465) [Link]
Cute. Doesn't work for unprivileged applications, though.
Russell: Sources of Randomness for Userspace Posted Mar 30, 2012 5:04 UTC (Fri) by cpeterso (guest, #305) [Link]
Hash(root password + MAC address) will always produce the same RNG seed. You could mix in the current time as a salt to get a different value very time.
|
|||||||||||||