diff --git a/man4/random.4 b/man4/random.4 index 5f0d52472..95fee6ed0 100644 --- a/man4/random.4 +++ b/man4/random.4 @@ -136,11 +136,13 @@ these applications, must be used instead, because it will block until the entropy pool is initialized. .PP -If a seed file is saved across reboots as recommended below (all major -Linux distributions have done this since 2000 at least), the output is +If a seed file is saved across reboots as recommended below, +the output is cryptographically secure against attackers without local root access as soon as it is reloaded in the boot sequence, and perfectly adequate for network encryption session keys. +(All major Linux distributions have saved the seed file across reboots +since 2000 at least.) Since reads from .I /dev/random may block, users will usually want to open it in nonblocking mode