arc4randomstir() in OpenSSH

[Niels Provos]

In message <3AC24650.6BE258C at Eng.Sun.COM>, Darren J Moffat writes:
>Would it be acceptable to replace the calls to arc4random() with
>reading from /dev/random and drop the arc4random_stir() all together ?
arc4random() does not block.  It is initalized with data from
/dev/arandom.  arc4randomstir() reintializes arc4random() with new
random data from the kernel.

If you replace all calls to arc4random() with a read from /dev/random,
you might cause OpenSSH to block for a long time.

Niels.