random.7: wfix

Reported-by: Jeremy Harris <jgh@redhat.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-11-15 06:57:51 +01:00
parent b171f0af8a
commit e10dec2908
1 changed files with 9 additions and 8 deletions

View File

@ -68,21 +68,22 @@ When a sufficient number of random bits has been collected, the
entropy pool is considered to be initialized.
.SS Choice of random device
Unless you are doing long-term key generation (and most likely not even
then), you probably shouldn't be using
then), you probably shouldn't be using the
.IR /dev/random
device
or
.BR getrandom (2)
with the
.BR GRND_RANDOM
flag or the
.IR /dev/random
device.
flag.
Instead, use either
Instead, use either the
.IR /dev/urandom
device or
.BR getrandom (2)
without the
.B GRND_RANDOM
flag or the
.IR /dev/urandom
device.
flag.
The cryptographic algorithms used for the
.IR urandom
source are quite conservative, and so should be sufficient for all purposes.