The skarnet.org C programming library http://git.skarnet.org/cgit/skalibs/atom/src/sysdeps/trygetrandom.c?h=v2.15.1.0 2019-10-26T06:08:45Z 2019-10-26T06:08:45Z Laurent Bercot ska-skaware@skarnet.org 2019-10-26T06:08:45Z urn:sha1:28bfd386f2e8046c7b1cfb4b796ea1347e6a42b0 2019-09-20T18:22:27Z Laurent Bercot ska-skaware@skarnet.org 2019-09-20T18:22:27Z urn:sha1:6011d413604df8224b91ca9f9b3d50663b60e117 Remaining clr: emptyregex: can be safely guessed to no nullispointer: can't be safely guessed, but do we need the test? devurandom: can't be safely guessed malloc0: can more or less be safely guessed to no 2017-04-26T17:09:46Z Laurent Bercot ska-skaware@skarnet.org 2017-04-26T17:09:46Z urn:sha1:880d31d1bbc0ee82a7bfae2423f27592ca507cff 2016-12-05T10:08:23Z Laurent Bercot ska-skaware@skarnet.org 2016-12-05T10:08:23Z urn:sha1:23b5c25a01a6738ea11526cc68bd99ca3c961a2f 2016-10-14T17:07:56Z Laurent Bercot ska-skaware@skarnet.org 2016-10-14T17:07:56Z urn:sha1:a1933bd1847951b959016f59ee744d1b18a00142 Correct random number generation has historically been suprisingly painful to achieve. There was no standard, every system behaved in a subtly different way, and there were a few userland initiatives to get decent randomness, all incompatible of course. The situation is a bit better now, we're heading towards some standardization. The arc4random() series of functions is a good API, and available on a lot of systems - unfortunately not Linux, but on Linux the new getrandom() makes using /dev/random obsolete. So I removed the old crap in librandom, dropped EGD support, dropped dynamic backend selection, made a single API series (random_* instead of goodrandom_* and badrandom_*), added an arc4random backend and a getrandom backend, and defaulted to /dev/urandom backed up by SURF in the worst case. This should be much smaller and logical. However, it's a major API break, so the skarnet.org stack will be changed to adapt.