2016-07-29 20:29 GMT+02:00 Barry Warsaw <ba...@python.org>:
>>The strict minimum is to implement os.getrandom() with a single call,
>>*but* retry the getrandom() call if it fails with EINTR and the Python
>>signal handler doesn't raise any exception. With this design, we don't
>>drop any collected byte. But os.getrandom() should be used with a loop
>>at the Python level.
>
> Yes, I'd opt for this.  I definitely don't think we should be discarding
> entropy, and I think a Python-level loop should be just fine.

Ok, fine. I will elaborate this part of my PEP next time I will update it :-)

Victor
_______________________________________________
Security-SIG mailing list
Security-SIG@python.org
https://mail.python.org/mailman/listinfo/security-sig

Reply via email to