Re: better random devices

2010-10-01 Thread Theo de Raadt
> > nobody should really be using srandom, but we provide it and it's a > > tempting target, so they do. let's give them arandom instead. they'll > > never know the difference, except it may actually work. :) > > I don't like this. If I was generating a particularly high-value key > (e.g. a l

Re: better random devices

2010-10-01 Thread Damien Miller
On Fri, 1 Oct 2010, Ted Unangst wrote: > nobody should really be using srandom, but we provide it and it's a > tempting target, so they do. let's give them arandom instead. they'll > never know the difference, except it may actually work. :) I don't like this. If I was generating a particula

Re: better random devices

2010-10-01 Thread Joachim Schipper
On Fri, Oct 01, 2010 at 11:36:25AM -0400, Ted Unangst wrote: > nobody should really be using srandom, but we provide it and it's a > tempting target, so they do. let's give them arandom instead. they'll > never know the difference, except it may actually work. :) > > i included a conversion f

better random devices

2010-10-01 Thread Ted Unangst
nobody should really be using srandom, but we provide it and it's a tempting target, so they do. let's give them arandom instead. they'll never know the difference, except it may actually work. :) i included a conversion for urandom on the same principle. Index: rnd.c ===