[Haskell-cafe] Re: Password hashing

[Andrew Butterfield]

> someone asked:
>>> What can be used for generating a random salt? Is System.Random
>>> secure enough?
>>>       
Achim Schneider wrote:
> ...or by pinging a random host and taking the time difference, checking
> the current cpu temperature and fan speed, counting how many times
> your process gets suspended in a certain amount of time, taking a
> picture of a lava lamp and hashing it, booting windows, not doing
> anything, and measure the time it takes to crash, hashing a snapshot
> of the slashdot frontpage, and, last, but not least, measuring the
> amount of spam per second currently swooshing into your mail account.
>
>   

or http://www.random.org/ perhaps ?

-- 
--------------------------------------------------------------------
Andrew Butterfield     Tel: +353-1-896-2517     Fax: +353-1-677-2204
Foundations and Methods Research Group Director.
School of Computer Science and Statistics,
Room F.13, O'Reilly Institute, Trinity College, University of Dublin
                            http://www.cs.tcd.ie/Andrew.Butterfield/
--------------------------------------------------------------------