I'm writing code that generates a cryptographic key pair. I have basically followed the implementation in certutil which gathers some random data from the keyboard and passes it to PK11_RandomUpdate. However a few people are suggesting that NSS uses fairly good sources of random data anyway and that providing it with extra random data is somewhat redundant.
So the question is can I just avoid the extra work of passing some random data to NSS before I generate the key? Dave _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto