Re: [bug-bash] $RANDOM not Cryptographically secure pseudorandom number generator

2019-01-19 Thread Chet Ramey
On 1/19/19 2:45 PM, Martijn Dekker wrote: > Op 16-01-19 om 02:21 schreef Quentin: >> If you really need some quality CSPRNG values, I'd suggest adding a >> $SECURE_RANDOM variable that just reads from /dev/urandom. > > IMHO, this would clearly be the correct approach. I don't know of any > 21st ce

Re: ~60 global variables use by only one function in bash source

2019-01-19 Thread Chet Ramey
On 1/18/19 6:06 PM, Peng Yu wrote: > Hi, > > I see these global or static variables (1st column) used only by one > function (2nd column). Some are from bash, some are from the libraries > that bash depends. OK. You've done the first part by compiling a list. Now you have to perform the analysis.

Re: [bug-bash] $RANDOM not Cryptographically secure pseudorandom number generator

2019-01-19 Thread Martijn Dekker
Op 16-01-19 om 02:21 schreef Quentin: > If you really need some quality CSPRNG values, I'd suggest adding a > $SECURE_RANDOM variable that just reads from /dev/urandom. IMHO, this would clearly be the correct approach. I don't know of any 21st century Unix or Unix-like system that doesn't have /de