From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <mbroz@redhat.com>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id CW0rjGQU61bi for <dm-crypt@saout.de>;
 Wed,  5 Oct 2011 18:13:39 +0200 (CEST)
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28])
 by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Wed,  5 Oct 2011 18:13:39 +0200 (CEST)
Received: from int-mx10.intmail.prod.int.phx2.redhat.com
 (int-mx10.intmail.prod.int.phx2.redhat.com [10.5.11.23])
 by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id p95GDcnq008585
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK)
 for <dm-crypt@saout.de>; Wed, 5 Oct 2011 12:13:38 -0400
Received: from [10.36.4.91] (vpn1-4-91.ams2.redhat.com [10.36.4.91])
 by int-mx10.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id
 p95GDaSd013769
 for <dm-crypt@saout.de>; Wed, 5 Oct 2011 12:13:37 -0400
Message-ID: <4E8C8230.1000607@redhat.com>
Date: Wed, 05 Oct 2011 18:13:36 +0200
From: Milan Broz <mbroz@redhat.com>
MIME-Version: 1.0
References: <CAFnMBaQExk2dm-jQwoXpJ0W0gtO74zATJVkOUoREy0r7SXvZpg@mail.gmail.com>
 <4E8C72B6.1040302@laposte.net> <20111005153933.GA896@tansi.org>
In-Reply-To: <20111005153933.GA896@tansi.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] zuluCrypt v3.0 released.
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On 10/05/2011 05:39 PM, Arno Wagner wrote:
> We had this discussion here several times for the  
> LUKS master key.

And you have full control (both if using cryptsetup wrapper
or libcryptsetup directly) to use urandom and random.

(And there will be also option to use another RNG,
like gcrypt one.)

So just make this configurable in GUI.

Milan