search for: cryptorand

...Cc: cryptography at c2.net, dtd at world.std.com, soley at sun.com Subject: Re: Entropy-gathering gizmos for Solaris? > Ok, now I'm curious about what all entropy-gathering gizmos, ... > might be available for/on Solaris -- anyone know? the solaris security toolkit has a program called cryptorand. about 3-4 years ago, i intensively reviewed and tested crypto- rand for a client. i talked a lot back then with bill soley, the sunsoft engineer who designed and wrote cryptorand, and bill gave me a lot of detail about how the program worked. because i've worked on true RNGs myself, i was ver...

...een able to find it... Sun's patch 105710-01 is available for free download and includes their /dev/random equivalent for SPARC architectures. The patch is actually a bunch of packages to patch up their web server product. One of the packages is the SUNWski package which includes their "cryptorand" random number generator. The cryptorand daemon hooks itself up to a named fifo. The name of the fifo defaults to /dev/random but it can easily be changed by editing the cryotrand startup script in /etc/init.d/. Presumably if it were changed to /dev/urandom, OpenSSL would use it by default....

Has anyone had success with getting /dev/random to work after installing SUNWski? After I install the pkg and start /etc/ init.d/cryptorand, the /dev/random file remains 0 bytes. I am running Solaris 2.8 - David

I built KTH Kerberos 1.0.6, OpenSSL 0.9.6, zlib 1.1.3 and OpenSSH 2.5.1p1 with WorkShop 5.0 on Solaris 2.6; /dev/random is provided by cryptorand from SUNWski. ssh -v -v -v produces the same output as ssh -v > ssh -v foobar OpenSSH_2.5.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090600f debug: Reading configuration data /etc/ssh/ssh_config debug: ssh_connect: getuid 17454 geteuid 0 anon 0 debug: Connecting to foobar [100.200.200.100] port 22...