pan3793 commented on PR #8550: URL: https://github.com/apache/hadoop/pull/8550#issuecomment-4716761292
@rohit-kb, this part has been broken again and again. Actually, the SSL ENGINE API is used solely to opt into Intel's RDRAND hardware RNG as OpenSSL's default random source. And the claim of `OpensslSecureRandom` > it's much faster than `java.security.SecureRandom` is dated and should be qualified. "Much faster" was a reasonable statement circa 2014 (HADOOP-10693) but is no longer a safe blanket claim on modern JDKs. I'd like to request a re-evaluation of the performance on the modern JDK, and if it does not have a performance advantage over `java.security.SecureRandom`, just drop it and switch to the JDK's implementation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
