3

Myths about /dev/urandom says that in rare cases very shortly after boot, the CSPRNG may not have had enough entropy to be properly seeded and /dev/urandom may not produce high-quality randomness.

How do I check to ensure that /dev/urandom has been properly seeded?

  • Many popular distros save a random seed upon shutdown, so there should be sufficient entropy when you are using one of those. Which distro are you using? – heemayl Jan 5 '17 at 4:36
  • Manjaro. I'm getting uninitialized urandom read (16 bytes read) at kernel boot. – Tom Hale Jan 5 '17 at 5:04
  • Try cat /proc/sys/kernel/random/entropy_avail – Kirill Sinitski Jan 5 '17 at 18:25
  • Good thought... how much /dev/random entropy available is needed to properly seed /dev/urandom? – Tom Hale Jan 6 '17 at 1:24
  • This depends on what you are doing and how concerned you are with security. Typically, you should Really Care about seeding your cryptographic random number generators. Assuming you are using OpenSSL's DRBG based on AES256-CTR with random nonce, you should have no less than 384 bits of entropy after you finished booting. – Kirill Sinitski Jan 6 '17 at 14:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.