[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Hardened OpenSSL fork



Steven Chamberlain <steven <at> pyro.eu.org> writes:

> I'd say the code still looks quite 'portable' in that it is ANSI C and
> isn't using kernel-specific features.  arc4random is just a library
> routine from their libc and I see no reason it can't be borrowed.

No, it’s more.

And after sysctl() got removed from Linux, the concept of arc4random
is not applicable to Linux any more.

Let alone Hurd.

bye,
//mirabilos

PS: arc4random using RC4 can be made immune against all known attacks
    against RC4.


Reply to: