I'm writing code that generates a cryptographic key pair. I have 
basically followed the implementation in certutil which gathers some 
random data from the keyboard and passes it to PK11_RandomUpdate. 
However a few people are suggesting that NSS uses fairly good sources of 
random data anyway and that providing it with extra random data is 
somewhat redundant.

So the question is can I just avoid the extra work of passing some 
random data to NSS before I generate the key?

Dave
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to