Re: cprng_fast implementation benchmarks
Thor Lancelot Simon <[email protected]> Wed, 23 Apr 2014 19:56:28 -0400
| Newsgroups | gmane.os.netbsd.devel.crypto,gmane.os.netbsd.devel.kernel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Apr 23, 2014 at 02:21:31PM +0000, [email protected] wrote: > > I?ve been watching this long stream of messages flying by, and I?m a bit concerned about the approach. > > As I understand it, there is a strong RNG, based on RC4 (?ARC4?) in the kernel today. No. There is a "strong" RNG, based on the NIST SP800-90 CTR_DRBG with AES128 as the block transform. There is also a "fast" RNG, based on RC4. We are discussing the replacement of the "fast" RNG. Thor