Changeset 42 for keysigning

Timestamp:

Jul 9, 2007, 9:18:47 PM (17 years ago)

Author:

simon

Message:

• 64 bytes of /dev/random instead of 18 bytes of /dev/urandom (There’s a theoretical advantage, but not really a practical advantage as it should be hard enough to guess 18 bytes of pseudo-random data that it makes little difference, this is just my policy. Should be configurable really.) (Also note that if you are sending lots of challenges, you may well run out of entropy quite soon when using /dev/random)

File:

• keysigning/gpg-challenge.pl (modified) (1 diff)

keysigning/gpg-challenge.pl

@@ -82 +82 @@
         # Get a random string:
         my $challenge;
-        open ( RANDOM, "head -c 18 /dev/urandom | mimencode|" )
+        open ( RANDOM, "dd if=/dev/random count=64 bs=1 | mimencode|" )
             || die "Cannot get random string\n";
         while ( <RANDOM> )