[OpenWrt-Devel] Q: understanding entropy/random for SSH-keys

Etienne Champetier champetier.etienne at gmail.com
Thu Feb 19 14:21:42 EST 2015


hi Bastian,

2015-02-19 8:58 GMT+01:00 Bastian Bittorf <bittorf at bluebottle.com>:
>
> as far is i know, mac80211 (or ath9k?) add entropy to the kernel.
> when a node starts up for the first time, we must wait till the
> kernel has enough entropy for generating good ssh-keys.
>
> is it a good idea to have some wifi-action for generating entropy?
> (e.g. a wifi scan) before generating keys?
>
> bye, bastian

the best thing to do would be to use getrandom() (linux 3.17 and up)
it's blocking until the pnrg is properly seeded.

Regards
Etienne

P.s: most of your emails end up in spam
as far is i know, mac80211 (or ath9k?) add entropy to the kernel.
when a node starts up for the first time, we must wait till the
kernel has enough entropy for generating good ssh-keys.

is it a good idea to have some wifi-action for generating entropy?
(e.g. a wifi scan) before generating keys?

bye, bastian
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20150219/bca44977/attachment.htm>
-------------- next part --------------
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


More information about the openwrt-devel mailing list