On Thu, 29 Jul 2004, Andy Polyakov wrote:

> >>Note that 3rd argument to padlock_xstore is no longer void ** and second
> >>argument to more diverse, 1 and 3.
> >
> > I read somewhere that with edx=3 the RNG gives the "best" random
> > numbers.
>
> Well, it's most "wasty" that's for sure:-) I mean it seem to compress 8
> bytes to 8 bits.

Wasty ... maybe. But you usually need not too much bytes with a good
entropy instead of a fast flow of numbers with poor entropy. How about
using the "slow" variant as RNG and the fast one as PRNG? There are
different entries for both in the RAND_METHOD structure.

> But note that they also discourage to use xstore with
> rep prefix and examine eax output at every call to xstore. We probably
> have to reconsider the implementation completely...

Maybe for the RNG but I doubt it is worth the trouble for PRNG. Anyway the
speed of generating RNs even in the "slow" variant is pretty high :-)

BTW IIRC they said that in "rare and unusual environments" they recommend
not using REP. But I don't have the specs by hand right now to recheck.

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to