[Cryptography] [FORGED] Re: OpenSSL and random

[Bill Cox]

On Wed, Nov 30, 2016 at 2:56 AM, Mark Steward <marksteward at gmail.com> wrote:

> On 30 Nov 2016 08:57, "Bill Cox" <waywardgeek at gmail.com> wrote:
> >
> > On Tue, Nov 29, 2016 at 5:09 PM, Theodore Ts'o <tytso at mit.edu> wrote:
> >>
> >> On Linux, my recommendation is to use getrandom(2) on Linux; you'll
> >> have to use syscall to access it because glibc developers are being,
> >> well.... very glibc.  If it doesn't exist, fall back to /dev/urandom.
> >
> >
> > Ugh...  You do realize that getrandom simply reads from /dev/random,
> right?
> >
> > The noise on these threads is not just aggravating, but suspicious...
> >
>
> Before you hit reply again, go read https://git.kernel.org/cgit/
> linux/kernel/git/torvalds/linux.git/commit/?id=c6e9d6f3.
>
> Mark
>

Whoa... I was entirely wrong!  The right answer on Linux is now:

Just call getrandom

Now I have to change a lot of code that reads /dev/random.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20161130/d1038384/attachment.html>