Skip site navigation (1) Skip section navigation (2)

Re: Fw: Random strings

From: Doug McNaught <doug(at)wireboard(dot)com>
To: "Joe Conway" <joseph(dot)conway(at)home(dot)com>
Cc: <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Fw: Random strings
Date: 2001-09-04 14:46:12
Message-ID: m3bskrovyj.fsf@belphigor.mcnaught.org (view raw or flat)
Thread:
Lists: pgsql-hackers
"Joe Conway" <joseph(dot)conway(at)home(dot)com> writes:

> > Having said that, I'm not married to the idea that we should provide
> access
> > to both /dev/random and /dev/urandom. I'd be happy to roll another patch,
> > limited to just urandom, and renaming the function if you feel strongly
> > about it. (should we move this discussion back to hackers to get a wider
> > audience?)

There was a long discussion on linux-kernel recently about the
difference between 'random' and 'urandom'.  The upshot seemed to be
that 'urandom' is Good Enough in 99% of the cases, since (as long as
the generator is seeded well at startup) attackers would have to break 
SHA1 in order to predict the output from it.  If someone has the
resources to do that you're basically screwed anyhow...

-Doug
-- 
Free Dmitry Sklyarov! 
http://www.freesklyarov.org/ 

We will return to our regularly scheduled signature shortly.

In response to

pgsql-hackers by date

Next:From: Tom LaneDate: 2001-09-04 14:51:22
Subject: Re: Build problem with CVS version
Previous:From: Dave CramerDate: 2001-09-04 13:54:27
Subject: Re: Troubles using German Umlauts with JDBC

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group