Submission + - Linux Random Number Generator Sees Major Improvements (zx2c4.com)
An anonymous reader writes: The Linux kernel's random number generator has seen its first set of major improvements in over a decade, improving everything from the cryptography to the interface used. Not only does it finally retire SHA-1 (in favor of BLAKE2s), but it also at long last unites `/dev/random` and `/dev/urandom`, finally ending years of Slashdot banter and debate:
The most significant outward-facing change is that
/dev/random and /dev/urandom are now exactly the same thing, with no differences between them at all, thanks to their unification in random: block in /dev/urandom. This removes a significant age-old crypto footgun, already accomplished by other operating systems eons ago. [...] The upshot is that every Internet message board disagreement on /dev/random versus /dev/urandom has now been resolved by making everybody simultaneously right! Now, for the first time, these are both the right choice to make, in addition to getrandom(0); they all return the same bytes with the same semantics. There are only right choices.
