package nocrypto

  1. Overview
  2. Docs

RNG seeding on Unix.

This module provides one-shot RNG seeding from the Unix kernel RNG, typically 

/dev/urandom

.

Calling initialize is enough to bring the RNG into a working state.

initialize is idempotent as long as the default generator is unchanged. It is harmless to call it several times.

If you are using lwt, conside using Nocrypto_entropy_lwt as this module allows for continuous reseeding.

Unless you want to recover from an unlikely case of missing system RNG, the recommended way to prime the RNG is to invoke initialize at the module level:

let () = Nocrypto_entropy_unix.initialize ()

Default generator initialization

val initialize : unit -> unit

Seeds the current defalt generator from the system RNG device if it is currently unseeded.

This is the closest thing to Random.self_init and is a good way to prime the RNG.

Manual seeding

val sys_rng : string

Detected system RNG device.

val reseed : ?bytes:int -> ?device:string -> Nocrypto.Rng.g -> unit

reseed ~bytes ~g mixes in bytes bytes from the system RNG into the generator g.

bytes default to a small value reasonable for periodic reseeding.

device defaults to sys_rng.