Subject: Re: rpc xid randomness
To: der Mouse <mouse@Rodents.Montreal.QC.CA>
From: Jun-ichiro itojun Hagino <itojun@itojun.org>
List: tech-security
Date: 09/08/2003 19:50:58
	to summarize,
	- the currently-committed code is not good.  it is not resistant to
	  number reuse/duplication.
	- sequential number with time.tv_sec initialization is resistant to
	  number reuse/duplication, if we don't set date(1).
	- niels' generator is resistant to number reuse/duplcation, and probably
	  there's no chance for duplication on reboot (due to the use of random
	  number as initialization)

	now, may i commit?

itojun