Collected research
Understanding and Managing Entropy Usage
Measures how little entropy Linux servers actually accumulate, roughly two to six bits per second, and shows OpenSSL seeds its PRNG only once per process without checking pool quality. Apache mod_ssl reseeds with a PID, a coarse timestamp and a stack value that changes only about eight percent of the time, and nginx never reseeds at all, so long-lived servers generate keys and nonces from near-static state.
Record
- Published by
- blackhat.com
- Format
- Recording
- Topic
- Crypto
In the archive
Related sources
- us 15 Potter Understanding And Managing Entropy Usage wp Whitepaper
- Understanding And Managing Entropy Usage
Tags
This page is the archive's own catalogue record. The research is the work of blackhat.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .