Re: cvs commit: openssl/crypto/rand rand_unix.c rand_vms.cMakefile.ssl rand_win.c

[Richard Levitte - VMS Whacker]

From: Bodo Moeller <[EMAIL PROTECTED]>

moeller> On Mon, Jan 08, 2001 at 11:59:33AM +0100, [EMAIL PROTECTED] wrote:
moeller> 
moeller> >   Change RAND_poll for Unix to try a number of devices and only read
moeller> >   them for a short period of time (actually, poll them with select(),
moeller> >   then read() whatever is there), which is about 10ms (hard-coded value)
moeller> >   each.
moeller> 
moeller> I don't like this hard-coded waiting time.  [...] A usleep
moeller> for 5 ms should be just as good on average (but with a fairer
moeller> distribution of randomness to multiple processes), and of
moeller> course then you can just as well not sleep/select at all.

Uhmm, I'm not sure I understand.  5ms is not the same as not waiting
at all.

moeller> Why use /dev/[s]random anyway?  /dev/urandom should be
moeller> enough, the OpenSSL PRNG does not try to provide more than
moeller> cryptographically strong random numbers.

I really, /dev/urandom is enough?  Even on system that don't have one?

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]