diff options
author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2014-05-17 22:44:35 -0500 |
---|---|---|
committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2014-05-17 22:44:35 -0500 |
commit | 3884b6afbf484dc49a0ba6fdaf7be4343ed480cf (patch) | |
tree | 680aec8096359fa544e23c1ebada333263c4526d /docs/hazmat/backends/openssl.rst | |
parent | 996d659a46c1d26a0346c60694fb504e75e3444f (diff) | |
parent | f24415092b8ce0fd3b081a383005568251f69483 (diff) | |
download | cryptography-3884b6afbf484dc49a0ba6fdaf7be4343ed480cf.tar.gz cryptography-3884b6afbf484dc49a0ba6fdaf7be4343ed480cf.tar.bz2 cryptography-3884b6afbf484dc49a0ba6fdaf7be4343ed480cf.zip |
Merge pull request #1053 from alex/long-lines-docs
Word wrap some long lines in teh docs
Diffstat (limited to 'docs/hazmat/backends/openssl.rst')
-rw-r--r-- | docs/hazmat/backends/openssl.rst | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/docs/hazmat/backends/openssl.rst b/docs/hazmat/backends/openssl.rst index f21116b8..6ad0d045 100644 --- a/docs/hazmat/backends/openssl.rst +++ b/docs/hazmat/backends/openssl.rst @@ -46,9 +46,9 @@ where two different processes can return similar or identical keys and compromise the security of the system. The approach this project has chosen to mitigate this vulnerability is to -include an engine that replaces the OpenSSL default CSPRNG with one that sources -its entropy from ``/dev/urandom`` on UNIX-like operating systems and uses -``CryptGenRandom`` on Windows. This method of pulling from the system pool +include an engine that replaces the OpenSSL default CSPRNG with one that +sources its entropy from ``/dev/urandom`` on UNIX-like operating systems and +uses ``CryptGenRandom`` on Windows. This method of pulling from the system pool allows us to avoid potential issues with `initializing the RNG`_ as well as protecting us from the ``fork()`` weakness. @@ -70,8 +70,8 @@ On Windows the implementation of ``CryptGenRandom`` depends on which version of the operation system you are using. See the `Microsoft documentation`_ for more details. -Linux uses its own PRNG design. ``/dev/urandom`` is a non-blocking source seeded -from the same pool as ``/dev/random``. +Linux uses its own PRNG design. ``/dev/urandom`` is a non-blocking source +seeded from the same pool as ``/dev/random``. .. _`OpenSSL`: https://www.openssl.org/ |