[openssl-dev] Work on a new RNG for OpenSSL

Salz, Rich rsalz at akamai.com
Tue Jun 27 18:55:47 UTC 2017


For windows RAND_bytes should just call CryptGenRandom (or its equiv).  For modern Linux, probably call getrandom(2).  For OpenBSD call arc4random().

Getrandom() is a syscall, and I have concerns about the syscall performance.  I would rather feed getrandom (or /dev/random if that’s not available) into a FIPS DRBG generator.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20170627/44fd1812/attachment-0001.html>


More information about the openssl-dev mailing list