> but it's a per-app password, so you can just do run bcrypt once, at startu...

Luit · on June 10, 2012

One way to get a good strong secret key for this purpose:

$ python

>>> import os

>>> os.urandom(64)

tcas · on June 11, 2012

You shouldn't use urandom for crypto purposes. /dev/random is generated (on most platforms) as cryptographic strength numbers (usually from hardware), but can block if it runs out of data. /dev/urandom was created with the guarantee to never block and will use /dev/random's pool of numbers initially but can start outputting lower entropy numbers if /dev/random blocks.

amalcon · on June 11, 2012

/dev/random is better than urandom for this sort of thing. On linux:

dd if=/dev/random bs=64 count=1 2>/dev/null | hexdump