DH prime generation taking a long time

Nikos Mavrogiannopoulos nmav at gnutls.org
Fri Oct 15 09:59:46 CEST 2010


On Thu, Oct 14, 2010 at 10:34 PM, Simon Josefsson <simon at josefsson.org> wrote:

>> The nettle code shouldn't have caused multiple reads to /dev/*random. It
>> reads 32 bytes on initialization from /dev/urandom and will read some
>> more after few hours. Which test causes this delay?
> Newly committed self-test tests/gendh.c triggers it too.  Running strace
> on it reveals it is calling time() a lot, which suggests it is spending
> time in nettle/rnd.c.  This is with GnuTLS built with Nettle as backend.

But do these calls actually cause a/the delay or the prime generation?




More information about the Gnutls-devel mailing list