Re: Clarification: OpenSSH entropy sources?

OpenSSH does the following behavior.

1. Checks of OpenSSL can seed itself. If can use it.
2. If it can't and no ssh prng helper is configured, fail.
3. if ssh prng helper is configured try to use it.
4. if ssh prng helper can not produce enough, fail.

So it will always try and use OpenSSL provided entropy before trying the ssh-prng-helper. This provides the ability for platforms like Solaris that just gained a /dev/random to use it without a recompile.

• Ben

On Fri, 2 May 2003, Jonathan Sturges wrote:

> I got no reply from comp.security.ssh so I'm forwarding it to the list.
Received on Fri May 2 15:06:53 2003