That's indeed a good treatment of the issue, with the first answer discussing how things work out with good randomness and the last answer discussing what happens with bad randomness!by erno - Debian
I see! May I suggest this is still a quite failure-prone ("fail-open") setup, and it would be better to remove those keys from the supplied tarball. Also, this stil leaves the issue of the random seed. If everyone removes the keys and then regenerates the ssh keys with urandom primed with same seed, it's not good even though there is a little bit of runtime randomness mixed in.by erno - Debian
Hello, I just managed to install Debian on my NSA325v2 thanks to the excellent resources found here and the nas-central.org wiki. But this thing caught my eye, after booting into Debian for the first time, it looks like sshd keys are used straight from the Debian-3.18.5-kirkwood-tld-1-rootfs-bodhi.tar.bz2 tarball and not regenerated? This would mean that all the Debian installs from thisby erno - Debian