DNSSEC - many doubts

[Reindl Harald]

Am 03.04.20 um 10:51 schrieb Timothe Litt:
> The entropy problem is especially severe in many VMs.  Besides Warren's
> suggestion:
> 
> Many current machines have hardware random noise sources that solve (or
> at least
> put a big dent) into the entropy problem.  A raspberry Pi is
> inexpensive, and unless you
> are generating zillions of keys, will solve most of these issues.  I use
> entropy broker
> https://www.vanheusden.com/entropybroker/ to distribute entropy from a Pi to
> my network.  (And you can always add another RPi.)  I don't recall the
> last time
> I ran out of entropy - and no, I'm not talking about the "organization"
> of my physical
> desktop :-)

https://wiki.archlinux.org/index.php/Haveged

and for the doubts: keep in mind the kernel is mixing all entropy
sources and even don't get compromised if one of them only returns 1 all
the time