CVSROOT: /cvs
Module name: src
Changes by: deraadt@cvs.openbsd.org 2011/01/04 12:42:22
Modified files:
sys/dev : rnd.c
Log message:
in arc4_stir() only grab 64 bytes from the MD5 output. Grabbing more
does not substantially increase the quality of the RC4 state. These
days we may have lots more userland libc's initializing themselves,
or lots of largebuf kernel calls which re-initialize their own RC4,
and thus deplete the MD5 more than originally intended.
discussed at length with tedu, djm, kjell and kettenis
ok kettenis
