{"action":"created","issue":{"url":"https://api.github.com/repos/awslabs/s2n/issues/176","repository_url":"https://api.github.com/repos/awslabs/s2n","labels_url":"https://api.github.com/repos/awslabs/s2n/issues/176/labels{/name}","comments_url":"https://api.github.com/repos/awslabs/s2n/issues/176/comments","events_url":"https://api.github.com/repos/awslabs/s2n/issues/176/events","html_url":"https://github.com/awslabs/s2n/issues/176","id":105188625,"number":176,"title":"/dev/random instead of /dev/urandom","user":{"login":"barnabycolby","id":1978993,"avatar_url":"https://avatars.githubusercontent.com/u/1978993?v=3","gravatar_id":"","url":"https://api.github.com/users/barnabycolby","html_url":"https://github.com/barnabycolby","followers_url":"https://api.github.com/users/barnabycolby/followers","following_url":"https://api.github.com/users/barnabycolby/following{/other_user}","gists_url":"https://api.github.com/users/barnabycolby/gists{/gist_id}","starred_url":"https://api.github.com/users/barnabycolby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/barnabycolby/subscriptions","organizations_url":"https://api.github.com/users/barnabycolby/orgs","repos_url":"https://api.github.com/users/barnabycolby/repos","events_url":"https://api.github.com/users/barnabycolby/events{/privacy}","received_events_url":"https://api.github.com/users/barnabycolby/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2015-09-07T10:14:02Z","updated_at":"2016-10-19T21:05:45Z","closed_at":"2016-10-19T15:52:06Z","body":"Shouldn't s2n use /dev/random instead of /dev/urandom for the drbg entropy source? /dev/urandom does not guarantee quality, if there is not enough entropy available in it's pool then it will still return values, /dev/random however will block until there is enough entropy.\r\n\r\nThis change would require some code within s2n_get_urandom_data to handle the possible blocking when reading from /dev/random, and some thought would need to be given as to what to do if it does block."},"comment":{"url":"https://api.github.com/repos/awslabs/s2n/issues/comments/254940675","html_url":"https://github.com/awslabs/s2n/issues/176#issuecomment-254940675","issue_url":"https://api.github.com/repos/awslabs/s2n/issues/176","id":254940675,"user":{"login":"alexw91","id":3596374,"avatar_url":"https://avatars.githubusercontent.com/u/3596374?v=3","gravatar_id":"","url":"https://api.github.com/users/alexw91","html_url":"https://github.com/alexw91","followers_url":"https://api.github.com/users/alexw91/followers","following_url":"https://api.github.com/users/alexw91/following{/other_user}","gists_url":"https://api.github.com/users/alexw91/gists{/gist_id}","starred_url":"https://api.github.com/users/alexw91/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexw91/subscriptions","organizations_url":"https://api.github.com/users/alexw91/orgs","repos_url":"https://api.github.com/users/alexw91/repos","events_url":"https://api.github.com/users/alexw91/events{/privacy}","received_events_url":"https://api.github.com/users/alexw91/received_events","type":"User","site_admin":false},"created_at":"2016-10-19T21:05:45Z","updated_at":"2016-10-19T21:05:45Z","body":"I believe the issue is that everyone feels confident in trusting /dev/urandom. Have you read http://www.2uo.de/myths-about-urandom/ ? If you have read it, do you have any concerns that aren't presented in that article? Or do you believe any of the arguments presented in that article are incorrect? "}}
{"actor":{"display_login":"alexw91"}}