Hacker News new | ask | show | jobs
by tptacek 1117 days ago
It's best to think of this as an OS/distro detail; if you can reasonably expect /dev/urandom to give you insecure bits, your distro has a vulnerability.

That said: today you'd just use some variant of getrandom.
1 comments
cbsmith 1117 days ago
> It's best to think of this as an OS/distro detail; if you can reasonably expect /dev/urandom to give you insecure bits, your distro has a vulnerability.

Isn't that more a function of hardware than software? The hardware random number generators on modern CPUs pretty much eliminate the need to worry about entropy...

link
tptacek 1117 days ago
No, this has nothing at all to do with hardware; the state of play is the same on machines that don't have instructions like RDRAND.
link
cbsmith 1116 days ago
I think I still don't understand. Can you explain why it is not a hypothetical problem on a deterministic virtual machine?
link