Re: ssleay PRNG entropy

2013-10-23 Thread Fedor Indutny
Hello again, Is there any way to speed up discussion on this topic? Cheers, Fedor. On Mon, Oct 21, 2013 at 3:09 PM, Fedor Indutny fe...@indutny.com wrote: Hello devs! I just found that its impossible to get error from `RAND_bytes()` if running on default `RAND_SSLeay()` method. There're

Re: ssleay PRNG entropy

2013-10-23 Thread Richard Könning
Am 21.10.2013 13:09, schrieb Fedor Indutny: Hello devs! I just found that its impossible to get error from `RAND_bytes()` if running on default `RAND_SSLeay()` method. There're a couple of reasons and observations, that are confirming it (sorry for using github, its just more convenient to

Re: ssleay PRNG entropy

2013-10-23 Thread Fedor Indutny
Hello Richard, Yes, I see what this comment means. But what's the difference between RAND_bytes() and RAND_pseudo_bytes() then? They seems to be using exactly the same amount of entropy and can't ever fail or return `0` (meaning that data is insecure). In my opinion, current implementation could

Re: ssleay PRNG entropy

2013-10-23 Thread Richard Könning
Am 23.10.2013 18:49, schrieb Fedor Indutny: Hello Richard, Yes, I see what this comment means. But what's the difference between RAND_bytes() and RAND_pseudo_bytes() then? They seems to be using exactly the same amount of entropy and can't ever fail or return `0` (meaning that data is

ssleay PRNG entropy

2013-10-21 Thread Fedor Indutny
Hello devs! I just found that its impossible to get error from `RAND_bytes()` if running on default `RAND_SSLeay()` method. There're a couple of reasons and observations, that are confirming it (sorry for using github, its just more convenient to me): 1. `RAND_poll()` is called only once in