Re: CVS commit: src/sys/netinet

"Perry E. Metzger" <[email protected]>
Newsgroups gmane.os.netbsd.devel.cvs,gmane.os.netbsd.devel.crypto
Message-ID <[email protected]>
David Laight <[email protected]> writes:
> I'm not sure that arc4random is appropriate for ip sequence numbers,
> it doesn't have the correct properties.  In particular the same output
> value can be generated by adjacent calls to the function - which you
> definitely don't want!  This will be true for any generator with more
> that 32 bits of state (or rather if the required value is smaller than
> the state).

Ideally, we want something that generates an unpredictable ergodic
sequence of some sort -- that is to say, a sequence guaranteed to
cycle through all possible values, but in an unpredictable order.

I'm not entirely sure what the right way to do this is, though.


-- 
Perry E. Metzger		[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.