=>From: Steve Freitas <[EMAIL PROTECTED]>
 =>...
 =>is there a way to generate entropy to prevent random 
 =>from blocking?

Depends on how badly you want it.  SGI has a <A
HREF="http://lavarand.sgi.com">neat solution</A>.  They use Lava
Lite(r) lamps and a video digitizer to generate gobs of entropy.  On a
more human scale, you can probably use a video camera looking at just
about anything, as long as it moves a little.  (How about FishRand?)

I've also seen occasional discussions about using a sound card to
digitize noise, but I can't remember whether the Hard Crypto guys
think that's a good idea or not.  I suspect there's not *that* much
entropy in what you get from a sound card.

I don't know how hard it'd be to feed that entropy into /dev/random,
though.  For web server use (bringing this back on-topic) you probably
want to use /dev/urandom, because otherwise local users can do a
denial-of-service by saying: "dd if=/dev/random of=/dev/null &"

d.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to