[MacRuby] #434: MacRuby should use arc4random() rather than random()
#434: MacRuby should use arc4random() rather than random() ---------------------------+------------------------------------------------ Reporter: jkh@… | Owner: lsansonetti@… Type: defect | Status: new Priority: blocker | Milestone: MacRuby 0.5 Component: MacRuby | Keywords: security crypto ---------------------------+------------------------------------------------ Recent discussion in #433 pointed out a flaw in using rand(), leading to the more pertinent observation that anything wanting genuinely cryptographic randomness should use arc4random(). See man page for arc4random() for instructions on how to use it as a drop-in replacement for random() / srandom(). -- Ticket URL: <http://www.macruby.org/trac/ticket/434> MacRuby <http://macruby.org/>
#434: MacRuby should use arc4random() rather than random() ---------------------------+------------------------------------------------ Reporter: jkh@… | Owner: martinlagardette@… Type: defect | Status: new Priority: blocker | Milestone: MacRuby 0.5 Component: MacRuby | Keywords: security crypto ---------------------------+------------------------------------------------ Changes (by lsansonetti@…): * owner: lsansonetti@… => martinlagardette@… Comment: Assigning to Thibault, since he wrote the new random.c. -- Ticket URL: <http://www.macruby.org/trac/ticket/434#comment:1> MacRuby <http://macruby.org/>
#434: MacRuby should use arc4random() rather than random() ---------------------------+------------------------------------------------ Reporter: jkh@… | Owner: martinlagardette@… Type: defect | Status: new Priority: blocker | Milestone: MacRuby 0.5 Component: MacRuby | Keywords: security crypto ---------------------------+------------------------------------------------ Comment(by martinlagardette@…): The problem, if we use arc4random(), is that we will not be able to reproduce exactly the way #srand is supposed to work, because there is not seed equivalent. I will talk to Laurent about that. -- Ticket URL: <http://www.macruby.org/trac/ticket/434#comment:2> MacRuby <http://macruby.org/>
#434: MacRuby should use arc4random() rather than random() -----------------------------+---------------------------------------------- Reporter: jkh@… | Owner: martinlagardette@… Type: defect | Status: closed Priority: blocker | Milestone: MacRuby 0.5 Component: MacRuby | Resolution: wontfix Keywords: security crypto | -----------------------------+---------------------------------------------- Changes (by martinlagardette@…): * status: new => closed * resolution: => wontfix Comment: Using arc4random() would make it impossible to implement #srand. Closing as wontfix -- Ticket URL: <http://www.macruby.org/trac/ticket/434#comment:3> MacRuby <http://macruby.org/>
participants (1)
-
MacRuby