[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Lynx-dev] predictable PRNG used
From: |
Michael S. Gilbert |
Subject: |
Re: [Lynx-dev] predictable PRNG used |
Date: |
Sun, 5 Jul 2009 13:04:27 -0400 |
On Sun, 5 Jul 2009 13:08:38 +0000 (UTC) Thorsten Glaser wrote:
> If arc4random(3) is available¹, lynx uses it. I sent in a patch
> for that years ago. Otherwise, there is no good self-seeding SRNG
> available in the standards, so it will use lrand48(3) instead²,
> with a fallback to rand(3) like everyone else.
i'm triaging this issue for linux, and i don't believe that it has an
arc4random implementation. so this would mean that lynx is using the
very insecure linear congruential algorithm and is thus affected by
this issue?
mike
- [Lynx-dev] predictable PRNG used, Michael S. Gilbert, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Thomas Dickey, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Thorsten Glaser, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used,
Michael S. Gilbert <=
- Re: [Lynx-dev] predictable PRNG used, Thomas Dickey, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Thorsten Glaser, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Michael S. Gilbert, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Thorsten Glaser, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Thomas Dickey, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, David Woolley, 2009/07/05
- Re: [Lynx-dev] predictable PRNG used, Atsuhito Kohda, 2009/07/08
- Re: [Lynx-dev] predictable PRNG used, Thomas Dickey, 2009/07/08
- Re: [Lynx-dev] predictable PRNG used, Atsuhito Kohda, 2009/07/08
- Re: [Lynx-dev] predictable PRNG used, Thorsten Glaser, 2009/07/09