Entropy collection in sshd (was Re: Entropy and DSA key)

Markus Friedl markus at openbsd.org
Wed Nov 7 08:34:56 EST 2001


On Tue, Nov 06, 2001 at 09:50:37AM -0800, Darren J Moffat wrote:
> I'm infavour of removing all entropy gathering code from OpenSSH,
> including the use of arc4random and the private pool it keeps. I would

arc4random(3) is used because it's in openbsd's libc and provides
reasonable randomness (as opposed to rand(3)/random(3))

but that can be canged to something like get_random_bytes()...



More information about the openssh-unix-dev mailing list