veorq / cryptocoding

Guidelines for low-level cryptography software
1.11k stars 90 forks source link

OpenBSD: Suggest using userspace PRNG where appropriate. #22

Closed diagprov closed 3 years ago

diagprov commented 3 years ago

Specifically, following discussions with knowledgeable people, arc4random on OpenBSD is a userspace per-process ChaCha20 seeded PRNG and probably better used for larger amounts of randomness than getentropy. Therefore, suggest it in preference to getentropy, but leave getentropy for its suggested use i.e. seeding PRNGs.

Resolves issue #17.

Signed-off-by: Antony Vennard antony@vennard.ch