Moar Entropy Sources

[Patrick]

@HulaHoop

I feel in that case it should be compressed into a footnote and cited as obsolete in the writeup " Viewpoint: better use /dev/random". This way it won’t be considered equal or cause confusion.

Good idea. Done.

@HulaHoop

Re-reading the argument for /dev/random I feel it only helps in a very limited corner case - programs wanting entropy from an empty entropy pool. It does nothing to protect in case of the pool having a garbage or malicious seed.

True. However that is a separate issue. The sake of discussion “/dev/random vs. /dev/urandom” it can be simplified:
in case of Kicksecure / Whonix: just use /dev/random

@HulaHoop

For the former, GitHub - rfinnie/twuewand: A truerand algorithm for generating entropy would help. I can open a ticket if you decide to package it down the line so the topic doesn’t get buried.

Could be posted here Moar Entropy Sources

And this list could also use an update: Entropy, Randomness, /dev/random vs /dev/urandom, Entropy Sources, Entropy Gathering Daemons, RDRAND

Such as:

• which tools have we exhausted
  • either installed by default or
  • discouraged by their original authors
  • discouraged for other reasons
• which tools further research is required?
• which tools in which priority (simplicity such as already in Debian or small code; impact) could be worked on next?