perl - RSA 和 Perl - 如何实现随机性？

Question

Crypt::OpenSSL::RSA 的文档对于如何实现随机性似乎很模糊。例如，是否必须调用

Crypt::OpenSSL::RSA->import_random_seed();

之前 每拨电至

Crypt::OpenSSL::RSA->generate_key

或者即使多次调用 generate_key 也可能调用 import_random_seed 一次就足够了？

那么 Crypt::OpenSSL::Random::random_seed($good_entropy) ?有 /dev/random据说没必要，但如果是 Windows 呢？

我正在寻求有使用它经验的人的建议。

Answer 1

有一些资料in one of the test files Crypt::OpenSSL::RSA 附带的。

On platforms without a /dev/random, we need to manually seed. In real life, the following would stink, but for testing purposes, it suffices to seed with any old thing, even if it is not actually random. We'll at least emulate seeding from Crypt::OpenSSL::Random, which is what we would have to do in "real life", since the private data used by the OpenSSL random library apparently does not span across perl XS modules.

所以你必须使用这些东西并在 Windows 设备上添加更多的随机性。