Forum Discussion

Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Mar 18, 2012

Random Number Generator

Hi Folks,     i'm looking for a secure way to generate random and non-predicable 256bit values for session cookies. I pretty much understand the basics of RNG and already know that the irule "ra...
security
Evan's avatar
Evan
Icon for Nimbostratus rankNimbostratus
Apr 20, 2012
Thanks Aaron for this post, very helpful. Can you provide any insight into how random the source is for the AES::key function? Is it using something like /dev/random or some combination of other factors? Has there been any testing/validation around the randomness?

 

 

Strange questions I know, but I am using this function to generate OTPs and my security review team is asking me to check all the details and even generate a large sample of output from the function to check randomness!

 

 

 

Thanks in advance!

 

Evan