Subject: Re: arc4random(9)
To: None <tls@rek.tjls.com>
From: None <itojun@iijlab.net>
List: tech-security
Date: 05/29/2002 07:53:21
>>  > 	arc4random(9) is stirred by rnd(4) number source.  so it is not just
>>  > 	another pseudorandom number mechanism, it fills the hole between
>>  > 	/dev/random and truely-crappy random().
>What does "better than random() but not as good as /dev/urandom" *mean*?

	you missed one point - better than random() but not as good as
	*/dev/random*.  i have no comparison results between /dev/urandom
	and arc4random (if any of you do, please send me one), but my
	impression is that arc4random is better in entropy-starved situation.

itojun