{"action":"created","issue":{"url":"https://api.github.com/repos/raaz-crypto/raaz/issues/250","repository_url":"https://api.github.com/repos/raaz-crypto/raaz","labels_url":"https://api.github.com/repos/raaz-crypto/raaz/issues/250/labels{/name}","comments_url":"https://api.github.com/repos/raaz-crypto/raaz/issues/250/comments","events_url":"https://api.github.com/repos/raaz-crypto/raaz/issues/250/events","html_url":"https://github.com/raaz-crypto/raaz/issues/250","id":168501062,"number":250,"title":"Alternatives to `/dev/random`","user":{"login":"piyush-kurur","id":693288,"avatar_url":"https://avatars2.githubusercontent.com/u/693288?v=3","gravatar_id":"","url":"https://api.github.com/users/piyush-kurur","html_url":"https://github.com/piyush-kurur","followers_url":"https://api.github.com/users/piyush-kurur/followers","following_url":"https://api.github.com/users/piyush-kurur/following{/other_user}","gists_url":"https://api.github.com/users/piyush-kurur/gists{/gist_id}","starred_url":"https://api.github.com/users/piyush-kurur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/piyush-kurur/subscriptions","organizations_url":"https://api.github.com/users/piyush-kurur/orgs","repos_url":"https://api.github.com/users/piyush-kurur/repos","events_url":"https://api.github.com/users/piyush-kurur/events{/privacy}","received_events_url":"https://api.github.com/users/piyush-kurur/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-07-31T04:34:28Z","updated_at":"2017-06-21T13:33:25Z","closed_at":"2017-06-21T13:33:25Z","body":"Currently we read `/dev/urandom` for randomness. This does not work on a non-Unix system like windows. Besides even on certain Unices, it might be more suitable to use specilised system calls\nlike `getentropy` (OpenBSD), getrandom (Linux). It seems that moving to getrandom on Linux for example has the following advantages as well.\n1. It _blocks_ when there is not enough randomness say at system boot for example. \n2. A file handle does not get wasted for  `/dev/urandom`. Apparently attackers could\n   force the process to open too many files and the force it to move to the potentially\n   unaudited fall back (this attack can be thwarted by not having a fall back at all and crashing\n   spectacularly)\n"},"comment":{"url":"https://api.github.com/repos/raaz-crypto/raaz/issues/comments/310079573","html_url":"https://github.com/raaz-crypto/raaz/issues/250#issuecomment-310079573","issue_url":"https://api.github.com/repos/raaz-crypto/raaz/issues/250","id":310079573,"user":{"login":"piyush-kurur","id":693288,"avatar_url":"https://avatars2.githubusercontent.com/u/693288?v=3","gravatar_id":"","url":"https://api.github.com/users/piyush-kurur","html_url":"https://github.com/piyush-kurur","followers_url":"https://api.github.com/users/piyush-kurur/followers","following_url":"https://api.github.com/users/piyush-kurur/following{/other_user}","gists_url":"https://api.github.com/users/piyush-kurur/gists{/gist_id}","starred_url":"https://api.github.com/users/piyush-kurur/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/piyush-kurur/subscriptions","organizations_url":"https://api.github.com/users/piyush-kurur/orgs","repos_url":"https://api.github.com/users/piyush-kurur/repos","events_url":"https://api.github.com/users/piyush-kurur/events{/privacy}","received_events_url":"https://api.github.com/users/piyush-kurur/received_events","type":"User","site_admin":false},"created_at":"2017-06-21T13:33:25Z","updated_at":"2017-06-21T13:33:25Z","body":"Current situation on entropy. OpenBSD/NetBSD arc4random by default. Linux experimental support for getrandom but uses `/dev/urandom` by default. Windows entropy is being worked on. Time to close this issue."}}
{"actor":{"display_login":"piyush-kurur"}}