Re: [Libevent-users] bug? arc4_seed_proc_sys_kernel_random_uuid() does not set arc4_seeded

Re: [Libevent-users] bug? arc4_seed_proc_sys_kernel_random_uuid() does not set arc4_seeded_ok on success

To: libevent-users <libevent-users@xxxxxxxxxxxxx>

Subject: Re: [Libevent-users] bug? arc4_seed_proc_sys_kernel_random_uuid() does not set arc4_seeded_ok on success

From: Jeroen Habraken <vexocide@xxxxxxxxx>

Date: Mon, 10 Jun 2013 11:18:50 -0500

Delivered-to: archiver@xxxxxxxx

Delivered-to: libevent-users-outgoing@xxxxxxxx

Delivered-to: libevent-users@xxxxxxxx

Delivery-date: Mon, 10 Jun 2013 12:19:17 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=wxh2YkLXfZ57C6WuGnBGoZmK7DyL5DTgvz9LGqO6qLw=; b=GoaC2iWP/c6uft7U8Tn0lF7MMMS+ILUN2VRHr5uabowm8LcapyHxIoRFYtcNuGAIXI BHpeOFwxskcfhXhvHWpbbOq7tBv0a1mzOhdrv4e72F7zLJHkUJFSsDxIVur59U8g3q36 bokH/qEnvQxJa9rR3yQA0MtIQS9nbMOKBa6qy2SULs2uuFtvNm4df7mJdrcwo1JWftuP sY55aWYQ2icLbpp6pSaM72PEtpc+D2QfRfSLCnTmbFKqKf3IWbblFGgSvoGVvA5G8uZO sxlx+9nmxaAvJm+XztiqJ8EPX96rcjyho9wxrQ+9IAgbNqWTFsBlB3EdWcewmPEa/jah yJdw==

In-reply-to: <CAKDKvuwZgYdRoEMA551tCNzKw+obdA0aXbRg=vB-LUqg7hQbiQ@xxxxxxxxxxxxxx>

References: <fb71edc67ca36a3d857533dbdb5977c7@xxxxxxxxxxxxxxx> <CAKDKvuzn2OwcKK51+S9tV7U96jWufP-5e+cZ4yt2j00SYZWr=Q@xxxxxxxxxxxxxx> <003d7c6680db0bedbacba29bd0ef2865@xxxxxxxxxxxxxxx> <CAKDKvuwZgYdRoEMA551tCNzKw+obdA0aXbRg=vB-LUqg7hQbiQ@xxxxxxxxxxxxxx>

Reply-to: libevent-users@xxxxxxxxxxxxx

Sender: owner-libevent-users@xxxxxxxxxxxxx

On 10 June 2013 11:14, Nick Mathewson <nickm@xxxxxxxxxxxxx> wrote:

On Mon, Jun 10, 2013 at 11:52 AM, Joseph Spadavecchia
<joseph@xxxxxxxxxxx> wrote:
> On Mon, 10 Jun 2013 10:28:41 -0400, Nick Mathewson <nickm@xxxxxxxxxxxxx>

[...]

>> [*] (Oh hey look what I did in my spare time the other month:
>> https://github.com/nmathewson/libottery . ÂBut see all the caveats in
>> the README.)
>
> Nice stuff. ÂI'll have a read through it sometime (it's a nice way to get
> familiar with ChaCha too). ÂCould this be a future (non-default) option for
> evutil_secure_rng?

I'd like to make it the only option at some point in the future once
there's sufficient confidence in the code. ÂI'm not sure I want to
have two PRNGs ship with libevent, one of which is known to have a
poor cipher (RC4), and one if which has a not-too-trusted
implementation. ÂLet's get one good one that we can have confidence
in, and just ship that.

yrs,
--
Nick

***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxx with
unsubscribe libevent-users Â Âin the body.

libsodium <https://github.com/jedisct1/libsodium> which is based on NaCl <http://nacl.cr.yp.to/> ships a Salsa20 based PRNG which might be of interest here.

Jeroen