News for the 1.3.6 release
New randomness generator based on Yarrow-256. Initial seeding
is done by a separate program, lsh-make-seed. See the manual
or the README file.
Manual update, new section describing the files and
environment variables that are used.
Various bug-fixes.
I believe the new randomness generator is a lot sounder than the old
arcfour-based one. It also uses a seed-file, so it doesn't have to
start over trying to collect randomness from the environment every
time it is used. Of course, that doesn't imply that it is bug-free.
The generic Yarrow code is in src/nettle/yarrow256.c. The
systemdependent code that lsh uses to seed it is in
src/lsh-make-seed.c and src/unix_random.c.
Available at
http://www.lysator.liu.se/~nisse/archive/lsh-1.3.6.tar.gz
(ftp seems down at the moment).
Regards,
/Niels
