best way to create entropy?

Sander Steffann sander at steffann.nl
Sun Oct 14 10:26:57 UTC 2012


Hi,

When you let OpenSSH use the egd protocol directly it will get its entropy from an egd daemon. Otherwise it uses /dev/random. When you use ekeyd-egd-linux then you feed the entropy from the egd daemon to the pool used for /dev/random. That way you are not completely dependent on the egd daemon, and other applications that need entropy benefit from the better-filled pool.

And yes, I run ekeyd-egd-linux on many VMs :-)
Sander




More information about the NANOG mailing list