On Oct 23, 2014, at 10:17 PM, Vladimir Zatsepin <vladimir.zatse...@gmail.com> 
wrote:
> Does somebody know how OPENSSL_cleanse() works?
> I don't understand what this [17, 63, 0xF] values means. Why such values were 
> chosen?

I think it's a simplistic random number generator, like a linear congruential 
generator- it's trying to fill the buffer with random-looking data. I'm not 
sure why it's doing that instead of simply filling with a constant value, 
though. (And if super-low-quality random numbers are sufficient/desired here, 
why not just call rand() ?)

The code starting from memchr() is particularly odd.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to