Re: Re: Still wondering about random numbers...

From: Doug McNaught <doug(at)wireboard(dot)com>
To: Allan Engelhardt <allane(at)cybaea(dot)com>
Cc: Bruno Wolff III <bruno(at)wolff(dot)to>, pgsql-general(at)postgresql(dot)org
Subject: Re: Re: Still wondering about random numbers...
Date: 2001-08-08 14:00:54
Message-ID: m3vgjyirc9.fsf@belphigor.mcnaught.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-patches

Allan Engelhardt <allane(at)cybaea(dot)com> writes:

> "/dev/urandom is not really better than rand(3) or random(3) *in
> this situation* [i.e. when reads from /dev/random stalls and there
> is no system entropy]"

I would still disagree. The difference for crypto purposes between a
CRNG seeded with real entropy (/dev/urandom) and an LCG (libc
functions) is huge. The former is useful (with caveats); the latter
is trivially breakable.

-Doug
--
Free Dmitry Sklyarov!
http://www.freesklyarov.org/

We will return to our regularly scheduled signature shortly.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Jim Caley 2001-08-08 14:55:12 Upgrade 7.0.2 -> 7.1.2: Errors during Restore
Previous Message Matt Block 2001-08-08 13:59:15 RE: Re: Still wondering about random numbers...

Browse pgsql-patches by date

  From Date Subject
Next Message Bruce Momjian 2001-08-08 15:19:32 Re: [PATCHES] JDBC2 Array Patch (New feature)
Previous Message Matt Block 2001-08-08 13:59:15 RE: Re: Still wondering about random numbers...