> There is a spirited discussion going on openssl-users re: using audio
> for the RNG.
We have deployed SSLeay-based commercial banking applications using
Windows 32 sound card support for the RNG. It's based on a library
we call sndlib, which provides APIs for recording and playback
cross-platform, but which actually only implements Win32 recording.
I designed it that way with the thought of also building a cross-platform
web phone over SSL.
It provides a new SSLeay entry-point, RAND_sound(), which fills a buffer
of typically 8K with the LSBs of recorded samples at the highest bitrate
and two channels if available. You then pass the buffer to RAND_seed().
I've just asked permission to release the code (which already works with
SSLeay hence OpenSSL), and it's being considered. I'll keep you posted.
------------------------------------------------------------
Clifford Heath http://www.osa.com.au/~cjh
Open Software Associates Limited mailto:[EMAIL PROTECTED]
29 Ringwood Street / PO Box 4414 Phone +613 9871 1694
Ringwood VIC 3134 AUSTRALIA Fax +613 9871 1711
------------------------------------------------------------
Proven Solution Deployment for the Global Enterprise
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]