Re: libmd (was Re: Having a single, good arc4random in Debian)

2016-02-13 Thread Guillem Jover
Hi! On Tue, 2016-01-19 at 01:18:28 +0100, Guillem Jover wrote: > [ Just posting to debian and fdo mailing lists, but this might be of > interest to other distros, please feel free to forward. ] This still applies. > On Mon, 2016-01-18 at 18:25:36 +0100, Marco d'Itri wrote: > > The same issue w

Re: Having a single, good arc4random in Debian

2016-01-18 Thread Guillem Jover
Hi! On Mon, 2016-01-18 at 09:57:27 -0800, Russ Allbery wrote: > Steven Chamberlain writes: > > I think it would be good for Debian to standardise on a single, good > > arc4random implementation, available to any application that wants to > > use it. > > > I'd like it to become ubiquitous, on all

libmd (was Re: Having a single, good arc4random in Debian)

2016-01-18 Thread Guillem Jover
Hi! [ Just posting to debian and fdo mailing lists, but this might be of interest to other distros, please feel free to forward. ] On Mon, 2016-01-18 at 18:25:36 +0100, Marco d'Itri wrote: > On Jan 18, Steven Chamberlain wrote: > > More background information follows. What do others think abo

Libbsd availability was Re: Having a single, good arc4random in Debian

2016-01-18 Thread Scott Kitterman
On January 18, 2016 12:57:27 PM EST, Russ Allbery wrote: ... >I'm all in favor of this, but when working on this, please take the >concerns of upstream into account. libbsd is readily available on >Debian, >but I don't know if that's the case on the other systems that upstream >is >trying to su

Re: Having a single, good arc4random in Debian

2016-01-18 Thread Russ Allbery
Steven Chamberlain writes: > I think it would be good for Debian to standardise on a single, good > arc4random implementation, available to any application that wants to > use it. > I'd like it to become ubiquitous, on all Debian arches (and eventually > other distributions). We should ensure a

Re: Having a single, good arc4random in Debian

2016-01-18 Thread Marco d'Itri
On Jan 18, Steven Chamberlain wrote: > More background information follows. What do others think about going > in this direction; the Debian Security Team in particular? Thanks! The same issue was discussed recently for the MD5 functions. The first step is to create a lintian test for packages

Having a single, good arc4random in Debian

2016-01-18 Thread Steven Chamberlain
Hi, I think it would be good for Debian to standardise on a single, good arc4random implementation, available to any application that wants to use it. I'd like it to become ubiquitous, on all Debian arches (and eventually other distributions). We should ensure applications do find it and use it,