Subject: Re: arc4random(9)
To: None <tech-kern@netbsd.org, tech-security@netbsd.org>
From: None <itojun@iijlab.net>
List: tech-kern
Date: 05/29/2002 16:58:57
>2) If the reseeding from /dev/random can't be turned off, the code's not
> useful as random(). You yourself even suggested earlier that it would
> be desirable to use the code as random().
let me back up. we cannot replace random() by arc4random() or other
strong crypto logic. there can be code that depends on its
predictability (and i learned that there are). so let me drop
suggestions like "make random() to be a stronger random number" or
"make random() an alias to arc4random()".
itojun