Subject: Re: arc4random(9)
To: None <email@example.com>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
Date: 05/29/2002 14:43:40
> [...], I get:
> 3. cryptographically strong generator for cases where you need
> it, such as CBC IVs.
Why do you need a cryptographically strong generator for IVs? They're
sent in the clear anyway.
(This is a serious question, not a criticism, at least not unless the
answer is "uhhh...you don't". :-) I can't see any reason, but I'm not
*nearly* cryptographer enough to be confident there isn't any.)
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML firstname.lastname@example.org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B