Mercurial > dropbear

comparison options.h @ 446:2cd2edfa11ee

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Just use /dev/urandom since that's what everyone ends up using anyway. Make -u a nop.
author Matt Johnston <matt@ucc.asn.au>
date Thu, 19 Jul 2007 15:47:32 +0000
parents d82a2a44c684
children 9c61e7af0156
comparison
equal deleted inserted replaced
445:edbee0596531 446:2cd2edfa11ee
160 * DROPBEAR_RANDOM_DEV is recommended on hosts with a good /dev/(u)random, 160 * DROPBEAR_RANDOM_DEV is recommended on hosts with a good /dev/(u)random,
161 * otherwise use run prngd (or egd if you want), specifying the socket. 161 * otherwise use run prngd (or egd if you want), specifying the socket.
162 * The device will be queried for a few dozen bytes of seed a couple of times 162 * The device will be queried for a few dozen bytes of seed a couple of times
163 * per session (or more for very long-lived sessions). */ 163 * per session (or more for very long-lived sessions). */
164 164
165 /* If you are lacking entropy on the system then using /dev/urandom 165 /* We'll use /dev/urandom by default, since /dev/random is too much hassle.
166 * will prevent Dropbear from blocking on the device. This could 166 * If system developers aren't keeping seeds between boots nor getting
167 * however significantly reduce the security of your ssh connections 167 * any entropy from somewhere it's their own fault. */
168 * if the PRNG state becomes guessable - make sure you know what you are 168 #define DROPBEAR_RANDOM_DEV "/dev/urandom"
169 * doing if you change this. */
170 #define DROPBEAR_RANDOM_DEV "/dev/random"
171
172 /* The -u flag on the commandline can also be used */
173 #define DROPBEAR_URANDOM_DEV "/dev/urandom"
174 169
175 /* prngd must be manually set up to produce output */ 170 /* prngd must be manually set up to produce output */
176 /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/ 171 /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/
177 172
178 /* Specify the number of clients we will allow to be connected but 173 /* Specify the number of clients we will allow to be connected but