You have access to high speed event counters on most platforms now. Where those are available, use them for reseed data instead of gettimeofday(). Far higher resolution, far less performance impact.
Peter From: "Dr. Stephen Henson" <st...@openssl.org> To: openssl-dev@openssl.org, Date: 16/01/2014 02:50 Subject: Re: [PATCH] Reseed PRNG on PID change Sent by: owner-openssl-...@openssl.org On Wed, Jan 15, 2014, Florian Weimer wrote: > Commit 3cd8547a2018ada88a4303067a2aa15eadc17f39 mixed the current > time into the randomness pool each time RAND_bytes is called. As > the resolution of gettimeofday() is limited, I propose to reseed the > PRNG each time a PID change is detected. > I know historically some platforms have different PIDs for different threads. That would cause problems with this patch. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
