deraadt told me that i should not replace random(9), as there can be some code depending on poorness, or uniformity, of random(9). hmm... i think i should add arc4random, yarrowrandom or something, for not-too-real-but-good-enough random number. itojun