Difference between revisions of "Talk:Random number generation"

From ArchWiki
Jump to: navigation, search
(Links with content: added, closing for now)
m (on the bashing of /dev/urandom: closing, old and un-related here. Securely_wipe_disk has an appropriate warning)
Line 1: Line 1:
== on the bashing of /dev/urandom ==
== <s>on the bashing of /dev/urandom </s>==
{{Note|This section was moved from [[Talk:Dm-crypt_with_LUKS]].}}
{{Note|This section was moved from [[Talk:Dm-crypt_with_LUKS]].}}

Revision as of 23:05, 28 August 2013

on the bashing of /dev/urandom

Note: This section was moved from Talk:Dm-crypt_with_LUKS.

I don't take an opinion on whether old overwritten data can be read.

However, there is an unrelated reason to fill a LUKS partition from /dev/urandom before LUKS-initializing it (and after checking for bad blocks if you wanted to do that).

It makes it harder for people trying to read your disk and find out what's on it. If you filled it with zeroes, for example, then they would be able to tell which portions of the partition had been written to since you initialized it.

compare gentoo docs, http://en.gentoo-wiki.com/wiki/DM-Crypt_with_LUKS#Filling_the_disk_with_random_data --Idupree 22:45, 3 March 2010 (EST)

Agreed, /dev/urandom should be used to clear partitions, at least as default in the examples. If anyone wants to zero the partitions instead of using random data, they are free to do so. --Montschok 20:53, 11 August 2010 (EDT)

Links with content

This is to provide some links which may be useful, if this page is going to be expanded.

Proposals to renew the linux /dev/random:

http://www.phoronix.com/scan.php?page=news_item&px=MTI5NzY leading to http://lkml.indiana.edu/hypermail/linux/kernel/1302.1/00479.html

and an article on /dev/random robustness (current; June 2013):


--Indigo (talk) 11:12, 25 August 2013 (UTC)

Very interesting, we could add them to the See also section as a start, right? -- Kynikos (talk) 13:38, 28 August 2013 (UTC)
Ok, fine. I added them. Maybe the LKML one can be put more into context sometime later. closing this. --Indigo (talk) 22:58, 28 August 2013 (UTC)