--=-=-=


Grrr.


--=-=-=
Content-Type: message/rfc822
Content-Disposition: inline

	by snark.piermont.com (Postfix) with ESMTP id ADB78D9800
	for <perry@snark.piermont.com>; Wed, 29 May 2002 11:04:10 -0400 (EDT)
	id 8AEE279C45; Wed, 29 May 2002 11:04:10 -0400 (EDT)
	by gertrude.piermont.com (Postfix) with ESMTP id 58E2479C09
	for <perry@piermont.com>; Wed, 29 May 2002 11:04:10 -0400 (EDT)
	id 425D0D97FD; Wed, 29 May 2002 11:04:10 -0400 (EDT)
Date: Wed, 29 May 2002 11:04:10 -0400 (EDT)
From: MAILER-DAEMON@piermont.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: perry@piermont.com
Message-Id: <20020529150410.425D0D97FD@snark.piermont.com>
Lines: 88
Xref: snark.piermont.com errors:92708 personal:27517
MIME-Version: 1.0
Content-Type: multipart/report; boundary="===-=-="

--===-=-=
Content-Description: Notification

This is the Postfix program at host snark.piermont.com.

I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the message returned below.

			The Postfix program

<tech-security@netbsd.rgo>: Name service error for netbsd.rgo: Host not found

--===-=-=
Content-Type: message/delivery-status
Content-Description: Delivery error report

Reporting-MTA: dns; snark.piermont.com
Arrival-Date: Wed, 29 May 2002 11:04:09 -0400 (EDT)

Final-Recipient: rfc822; tech-security@netbsd.rgo
Action: failed
Diagnostic-Code: X-Postfix; Name service error for netbsd.rgo: Host not found

--===-=-=
Content-Type: message/rfc822
Content-Description: Undelivered Message

	id 543ECD97FC; Wed, 29 May 2002 11:04:09 -0400 (EDT)
Sender: perry@snark.piermont.com
From: "Perry E. Metzger" <perry@wasabisystems.com>
To: tls@rek.tjls.com
Cc: tech-kern@netbsd.org, tech-security@netbsd.rgo
Subject: Re: arc4random(9)
References: <20020528130633.Q22765@dr-evil.shagadelic.org>
	<23407.1022624005@itojun.org>
	<20020528152943.U22765@dr-evil.shagadelic.org>
	<20020528224444.GA14420@rek.tjls.com>
	<20020528155506.Y22765@dr-evil.shagadelic.org>
	<87bsazztrw.fsf@snark.piermont.com>	<20020529031323.GA3534@rek.tjls.com>
	<87elfvdopv.fsf@snark.piermont.com>	<20020529142817.GA25077@rek.tjls.com>
Date: 29 May 2002 11:04:09 -0400
In-Reply-To: <20020529142817.GA25077@rek.tjls.com>
Message-ID: <87it57atcm.fsf@snark.piermont.com>
Lines: 25
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii


Thor Lancelot Simon <tls@rek.tjls.com> writes:
> > > Well, then, let's just call it "random()".
> > 
> > Yup -- modulo the fact that I think (I may be mistaken) that Posix may
> > specify the algorithm.
> 
> For the random-number generator in the *kernel*?

Well, admittedly in the kernel it need not be the same, but remember
there is also a userland function to consider. I think it would be
nice to have a better RNG in userland.

> Incidentally, have a look at the way the reseeding works -- it seems
> needlessly complex, and that worries me (why not a simple rekeying with
> a new random key?).  Do you agree that it ought to toss the first N bytes 
> every time it reseeds, if it should even reseed at all?

It should certainly be tossing a bunch of data after a reseed. The way
reseeds work should also be reassessed.

--
Perry E. Metzger		perry@wasabisystems.com
--
NetBSD: The right OS for your embedded design. http://www.wasabisystems.com/

--===-=-=--

--=-=-=



-- 
Perry E. Metzger		perry@piermont.com
--
"Ask not what your country can force other people to do for you..."

--=-=-=--