entropy.c patch to avoid unnecessary reading of /dev/urandom

Dan Astoorian djast at cs.toronto.edu
Fri Nov 9 04:27:16 EST 2001


This one-line patch prevents OpenSSH from depleting entropy
unnecessarily from /dev/urandom when the OpenSSL library acquires its
own entropy.

Without this patch OpenSSH opens /dev/urandom and reads 32 bytes, and
then OpenSSL opens it again and reads an additional 20.

-- 
Dan Astoorian               People shouldn't think that it's better to have
Sysadmin, CSLab             loved and lost than never loved at all.  It's
djast at cs.toronto.edu        not, it's better to have loved and won.  All
www.cs.toronto.edu/~djast/  the other options really suck.    --Dan Redican
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/binary
Size: 291 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011108/20374224/attachment.bin 


More information about the openssh-unix-dev mailing list