This is the mail archive of the ecos-discuss@sourceware.org mailing list for the eCos project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Re: Entropy gathering?


Hi, Grant,

Grant Edwards <grante@visi.com> wrote:

> I've been googling to find some source
> material on practical aspects of maintaining an entropy pool,
> but so far haven't found much of anything.

Maybe you can ask in the UseNet Newsgroup sci.crypt (after assuring that
their FAQ doesn't contain some useful pointers).

Also, libtomcrypt or the CryptoPP lib may contain entropy code.
OpenSSL / GnuTLS definitely have, but they both are rather heavyweight.

And "Applied Cryptography" by Bruce Schneier, and "Cryptograpyh for
developers" by Tom St. Denis may be worth a look.

There are also some recent articles analyzing the entropy pools from
Linux, BSDish Systems and Windows, where some weaknesses showed up.


Cryptography is a field of mines, and most ad-hoc implementations by
non-experts turn out to be severely broken some time after deployment.


Regards,
Markus

-- 
Markus Schaber | Logical Tracking&Tracing International AG
Dipl. Inf.     | Software Development GIS

Fight against software patents in Europe! www.ffii.org
www.nosoftwarepatents.org

-- 
Before posting, please read the FAQ: http://ecos.sourceware.org/fom/ecos
and search the list archive: http://ecos.sourceware.org/ml/ecos-discuss


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]