P Kamath wrote:

> I said it is an RNG, not cryptographic RNG.  By adding current time
> source,
> however crude, and doing a sha1/md5, why should it not be cryptoPRNG?
> What
> properties should I look for?

You should look for a cryptographically-secure random number generator.
Seriously, you shouldn't be hacking random bits of junk together and then
relying on it to be secure.

DS

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to