> There is a spirited discussion going on openssl-users re: using audio
> for the RNG.

We have deployed SSLeay-based commercial banking applications using
Windows 32 sound card support for the RNG.  It's based on a library
we call sndlib, which provides APIs for recording and playback
cross-platform, but which actually only implements Win32 recording.
I designed it that way with the thought of also building a cross-platform
web phone over SSL.

It provides a new SSLeay entry-point, RAND_sound(), which fills a buffer
of typically 8K with the LSBs of recorded samples at the highest bitrate
and two channels if available. You then pass the buffer to RAND_seed().

I've just asked permission to release the code (which already works with
SSLeay hence OpenSSL), and it's being considered.  I'll keep you posted.

------------------------------------------------------------
Clifford Heath                    http://www.osa.com.au/~cjh
Open Software Associates Limited       mailto:[EMAIL PROTECTED]
29 Ringwood Street / PO Box 4414       Phone  +613 9871 1694
Ringwood VIC 3134      AUSTRALIA       Fax    +613 9871 1711
------------------------------------------------------------
Proven Solution Deployment for the Global Enterprise
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to