Problem - Kevin Tafuro

EGD (Entropy Gathering Daemon), 594–599
commands, 594
risks as an entropy source, 595
socket directory, 596
ELF-based Unix and environment
variables, 3
elf_get_entry( ), 697
elliptic curve cryptography, 308
licensing, 312
email
addresses, validating, 101–102
confirming requests via, 447–453
lexical rules, validation against, 101
email, certificates for use in, 514
EME-OAEP padding, 333–336
ENCMAP data type, 148
encryption
in a single reduced character set, 146
Kerberos, using, 470–475
message integrity and, 298
parallelizing in modes that allow
it, 208–211
using hash functions, 301–303
encryption algorithms
choosing, 156–160
supporting multiple, 155
“Encryption Queue” implementation of
CWC, 217–221
encrypt-then-authenticate paradigm, 299
encrypt_within_charset( ), 148
endianess, 118
endpwent( ), 373
Enhanced SNACC ASN.1 compiler,
source, 353
entropy, 570
adding, reasons for, 592
collection tips, 572
compression of entropy-containing
data, 593
determining required quantity, 571
EGADS (Entropy Gathering and
Distribution System),
using, 599–603
EGD and compatible third-party
tools, 594–599
entropy harvesters, 569
estimation and management, 621–629
attacks on entropy sources, 622
disk access, entropy in, 628
insecurity of boot time as entropy
source, 621
key presses, entropy in, 627
mouse events, entropy in, 627
network data, entropy in, 628
sound devices, entropy in, 629
thread timing and system state,
entropy in, 629
threat models, 621–625
timestamps, entropy in, 625–627
Unix systems, observable entropy, 622
fractional bits, 571
generic API for, 573
getting at startup, 614
key length and, 569
keyboards, gathering from, 630–637
Unix, 631–633
Windows, 634–637
mouse events, gathering from in
Windows, 638–643
system state, gathering from, 644
thread timings, gathering from, 643
Unix tools for generating, 575–579
usefulness, 569
whitening, 571
Entropy Gathering and Distribution System
(see EGADS)
Entropy Gathering Daemon (see EGD)
ENTROPY_PER_SAMPLE macro, 631
enveloping interfaces, 333
environ global variable (C language), 2
environment validation, 648
environment variables
CGI scripts, used by, 5
deleting, 95
inheritance, 92
obtaining, 92
protecting from exploitation, 1–7
secure usage, 92–97
TZ (time zone), 4
Unix and Windows dependencies, 2
value, changing, 93
ephemeral Diffie-Hellman, 436
ephemeral keying, 446
equals (=), base64 padding character, 124
erasing files securely, 47
error handling, 700–704
evaluating URL encodings, 99
event-driven systems and shatter attacks, 717
EVP_CIPHER_CTX_cipher( ), 230
EVP_CIPHER_CTX_ctrl( ), 229
EVP_CIPHER_CTX_init( ), 222
EVP_CIPHER_CTX_mode( ), 230
EVP_CIPHER_CTX_set_key_length( ), 226,
227
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Index | 745