CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2011/01/04 12:42:22
Modified files:
sys/dev : rnd.c
Log message:
in arc4_stir() only grab 64 bytes from the MD5 output. Grabbing more
does not substantially increase the quality of the RC4 state. These
days we may have lots more userland libc's initializing themselves,
or lots of largebuf kernel calls which re-initialize their own RC4,
and thus deplete the MD5 more than originally intended.
discussed at length with tedu, djm, kjell and kettenis
ok kettenis