[uClibc 0000090]: New arc4random() function.

[bugs at busybox.net]

The following issue has been CLOSED 
====================================================================== 
http://busybox.net/bugs/view.php?id=90 
====================================================================== 
Reported By:                ashes
Assigned To:                uClibc
====================================================================== 
Project:                    uClibc
Issue ID:                   90
Category:                   Security
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     closed
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             02-08-2005 19:10 PST
Last Modified:              01-08-2006 01:07 PST
====================================================================== 
Summary:                    New arc4random() function.
Description: 
This function originates from OpenBSD. It is a very fast random number
generator. Attached is all the code we need, and hooks so we can use it
with SSP and/or sysctl erandom. I tested it fairly well with SSP and I
couldn't messure any performance loss compared to using /dev/urandom
directly. I also timed it while using the sysctl hooks and again found no
measureable loss. It might need some tweaking to be compatible with
c99/standards.

I added it to stdlib because that's where OpenSSL, etc, expects to find
it.
====================================================================== 

---------------------------------------------------------------------- 
 ashes - 02-11-05 05:58  
---------------------------------------------------------------------- 
Hi. Ive added hooks for mktemp(3) to use arc4random. This new patch divides
urandom from erandom so non-crypto apps don't use kernel entropy. I imagine
there will need to be modifications before it would be accepted. Let me
know. The sysctl urandom interface was added with minimal
modifications/additions to the kernel patch for erandom.

regards 

---------------------------------------------------------------------- 
 vapier - 01-08-06 01:07  
---------------------------------------------------------------------- 
ive imported arc4random() all by itself ... that is, none of the ssp
stuff/erandom stuff was added since it's all outdated 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
02-08-05 19:10  ashes          New Issue                                    
02-08-05 19:10  ashes          File Added: uClibc-20050208-arc4random-1.patch   
                
02-11-05 05:58  ashes          Note Added: 0000045                          
02-11-05 05:59  ashes          File Added:
uClibc-0.9.27-arc4random-1.patch-testing                    
03-16-05 11:55  andersen       Assigned To              andersen => uClibc  
01-08-06 01:07  vapier         Note Added: 0000869                          
01-08-06 01:07  vapier         Status                   assigned => closed  
01-08-06 01:07  vapier         Resolution               open => fixed       
======================================================================