[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [Libevent-users] bug? arc4_seed_proc_sys_kernel_random_uuid() does not set arc4_seeded_ok on success



On 10 June 2013 11:14, Nick Mathewson <nickm@xxxxxxxxxxxxx> wrote:
On Mon, Jun 10, 2013 at 11:52 AM, Joseph Spadavecchia
<joseph@xxxxxxxxxxx> wrote:
> On Mon, 10 Jun 2013 10:28:41 -0400, Nick Mathewson <nickm@xxxxxxxxxxxxx>
[...]
>> [*] (Oh hey look what I did in my spare time the other month:
>> https://github.com/nmathewson/libottery . ÂBut see all the caveats in
>> the README.)
>
> Nice stuff. ÂI'll have a read through it sometime (it's a nice way to get
> familiar with ChaCha too). ÂCould this be a future (non-default) option for
> evutil_secure_rng?

I'd like to make it the only option at some point in the future once
there's sufficient confidence in the code. ÂI'm not sure I want to
have two PRNGs ship with libevent, one of which is known to have a
poor cipher (RC4), and one if which has a not-too-trusted
implementation. ÂLet's get one good one that we can have confidence
in, and just ship that.

yrs,
--
Nick
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxx with
unsubscribe libevent-users  Âin the body.

libsodium <https://github.com/jedisct1/libsodium> which is based on NaCl <http://nacl.cr.yp.to/> ships a Salsa20 based PRNG which might be of interest here.

Jeroen