Re: "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom?""

2017-01-04 Thread Gary E. Miller
Yo Greg! On Wed, 04 Jan 2017 04:19:58 + Greg Rubin wrote: > I'll admit that I'm not a python expert by any means, but I'm pretty > certain that the seed is ignored: > http://svn.python.org/projects/python/tags/r30rc1/Lib/random.py Now that I have caught up on other things, I have drilled in

Re: "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom?""

2017-01-03 Thread Eric S. Raymond
Mark Atwood : > Hi! > > My friend Greg Rubin, who does security work for Amazon, took at quick look > at NTPsec 0.9.6, and asks the following queston: > > "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom? It's > ignored, so it doesn't matt

Re: "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom?""

2017-01-03 Thread Gary E. Miller
Yo Greg! On Wed, 04 Jan 2017 04:19:58 + Greg Rubin wrote: > Gary, > > I'll admit that I'm not a python expert by any means, but I'm pretty > certain that the seed is ignored: > http://svn.python.org/projects/python/tags/r30rc1/Lib/random.py > > class SystemRandom(Random): > ... > def seed(

Re: "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom?""

2017-01-03 Thread Gary E. Miller
Yo Mark! On Wed, 04 Jan 2017 03:53:02 + Mark Atwood wrote: > "Why does ntpkeygen pass a low entropy ignored seed into > SystemRandom? Its a start. I guess I could grab something from /dev/random to add to the mix. > It's ignored, so it doesn't matter, but it

"Why does ntpkeygen pass a low entropy ignored seed into SystemRandom?""

2017-01-03 Thread Mark Atwood
Hi! My friend Greg Rubin, who does security work for Amazon, took at quick look at NTPsec 0.9.6, and asks the following queston: "Why does ntpkeygen pass a low entropy ignored seed into SystemRandom? It's ignored, so it doesn't matter, but it's the type of error whic