Hacker News new | ask | show | jobs
by leccine 4347 days ago
As opposed to have everybody implement his/her own random()/entropy().
2 comments
awj 4347 days ago
...the NSA would love that most of all. The vast majority of programmers lack the knowledge, skill, or both required to correctly implement anything related to cryptography.
link
leccine 4347 days ago
"The vast majority of programmers lack the knowledge, skill, or both required to correctly implement anything."

Agreed.

link
agwa 4347 days ago
Who's "everybody?" If you mean userspace application/library developers, they don't have a good source of entropy, so they have to get it from the kernel. That means userspace CSPRNGs end up depending on the kernel CSPRNG. Presto, two single points of failure!
link
leccine 4347 days ago
I see, so prior to this random() and entropy() addition to Linux nobody could ever write any security related application. Yes, this is true. We should change the pull request to "Enable security for Linux, 2014". God, never too late...
link