This is the mail archive of the
ecos-discuss@sourceware.org
mailing list for the eCos project.
Re: Re: Entropy gathering?
Hi, Grant,
Grant Edwards <grante@visi.com> wrote:
> I've been googling to find some source
> material on practical aspects of maintaining an entropy pool,
> but so far haven't found much of anything.
Maybe you can ask in the UseNet Newsgroup sci.crypt (after assuring that
their FAQ doesn't contain some useful pointers).
Also, libtomcrypt or the CryptoPP lib may contain entropy code.
OpenSSL / GnuTLS definitely have, but they both are rather heavyweight.
And "Applied Cryptography" by Bruce Schneier, and "Cryptograpyh for
developers" by Tom St. Denis may be worth a look.
There are also some recent articles analyzing the entropy pools from
Linux, BSDish Systems and Windows, where some weaknesses showed up.
Cryptography is a field of mines, and most ad-hoc implementations by
non-experts turn out to be severely broken some time after deployment.
Regards,
Markus
--
Markus Schaber | Logical Tracking&Tracing International AG
Dipl. Inf. | Software Development GIS
Fight against software patents in Europe! www.ffii.org
www.nosoftwarepatents.org
--
Before posting, please read the FAQ: http://ecos.sourceware.org/fom/ecos
and search the list archive: http://ecos.sourceware.org/ml/ecos-discuss