[Cryptography] OpenSSL CSPRNG work

Mark Steward marksteward at gmail.com
Mon Jul 3 07:47:24 EDT 2017


On Mon, Jul 3, 2017 at 6:16 AM, Jon Callas <jon at callas.org> wrote:

>
> On Jul 2, 2017, at 2:46 PM, Mark Steward <marksteward at gmail.com> wrote:
>
> I think Watson Ladd's point will be missed so to call it out again: in the
> context of this discussion, arc4random is a placeholder for ChaCha20 or
> newer replacement, as it is in OpenBSD 5.5+. It doesn't mean RC4.
>
>
> I'm sorry.
>
> arc4random(3) is a function in stdlib.h. Look at the man pages.
>
> If you mean some suitable PRF/PRP to be named later, say so.
>

Relevant man pages for OpenBSD and Linux:


https://github.com/openbsd/src/commit/c818251c#diff-f95c365522c4431af5ad142285d335f1R109

https://git.hadrons.org/cgit/libbsd.git/commit/man/arc4random.3?id=874a0e51

FreeBSD's latest commit is "this is a bandaid that allows us to work on
switching to a more modern PRNG":

  https://svnweb.freebsd.org/base?view=revision&revision=315225


Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20170703/4451aca6/attachment.html>


More information about the cryptography mailing list