3

Myths about /dev/urandom says that in rare cases very shortly after boot, the CSPRNG may not have had enough entropy to be properly seeded and /dev/urandom may not produce high-quality randomness.

How do I check to ensure that /dev/urandom has been properly seeded?

6
  • Many popular distros save a random seed upon shutdown, so there should be sufficient entropy when you are using one of those. Which distro are you using?
    – heemayl
    Jan 5, 2017 at 4:36
  • Manjaro. I'm getting uninitialized urandom read (16 bytes read) at kernel boot.
    – Tom Hale
    Jan 5, 2017 at 5:04
  • 1
    Try cat /proc/sys/kernel/random/entropy_avail Jan 5, 2017 at 18:25
  • Good thought... how much /dev/random entropy available is needed to properly seed /dev/urandom?
    – Tom Hale
    Jan 6, 2017 at 1:24
  • This depends on what you are doing and how concerned you are with security. Typically, you should Really Care about seeding your cryptographic random number generators. Assuming you are using OpenSSL's DRBG based on AES256-CTR with random nonce, you should have no less than 384 bits of entropy after you finished booting. Jan 6, 2017 at 14:36

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.