Subject: Re: arc4random(9)
To: None <tech-kern@netbsd.org, tech-security@netbsd.org>
From: None <itojun@iijlab.net>
List: tech-kern
Date: 05/29/2002 16:58:57
>2) If the reseeding from /dev/random can't be turned off, the code's not
>   useful as random().  You yourself even suggested earlier that it would
>   be desirable to use the code as random().

	let me back up.  we cannot replace random() by arc4random() or other
	strong crypto logic.  there can be code that depends on its
	predictability (and i learned that there are).  so let me drop
	suggestions like "make random() to be a stronger random number" or
	"make random() an alias to arc4random()".

itojun