>mgaudichet> Do you have a better solution than above (e.g. hardcode >mgaudichet> some kind of random data and use it with RAND_seed()...), >mgaudichet> or does it seem ok to you ? > >Never hardcode any "randomness". Such habits can safely be called a >sin, if you believe in that.
Unless you explicitly don't care about strong crypto at all. For example when building SSL into Nmap, the only purpose is to find out what's listening on the port inside the SSL layer, and the strength of the encryption is completely irrelevant. It'll seed with totaly unrandom junk if it needs to, and the list of offered ciphers is sorted by speed as measured on my 686, rather than by cipher strength. But then again, I can't think of any other valid reasons for doing things this way. It kinda hurt writing it, even though it was correct for the purpose. -- Brian Hatch A conclusion is Systems and the place where Security Engineer you got tired http://www.ifokr.org/bri/ of thinking. Every message PGP signed
pgp00000.pgp
Description: PGP signature
