Do not use GnuPG under Mac OS RNG

Gordon Worley redbird@mac.com
Wed Jun 27 21:30:02 2001


At 8:12 PM +0200 6/27/01, Werner Koch wrote:

> || On Wed, 27 Jun 2001 09:38:42 -0400
> || Gordon Worley <redbird@mac.com> wrote:
>
> gw> Okay, first, let's make sure we're talking about the same
> gw> thing. rndunix is what I'm getting if I call rnd(), correct? I
>
>You mean rand(3)? rndunix.c has noithing to to with this, it is the
>part of GnuPG which collect entropy on Unix like OSes.
Yes, I see, a big misunderstanding. Okay, I've figured out what you mean now and am looking into it. Guess that's what I get for not knowing GnuPG inside out. ;-) Okay, just to check again, gnupg passes all of it's self tests (running make check). I know that a URL to a paper about this topic was posted (I have the paper and am reading it), but is there anything else I need to do to make sure that rndunix.c is returning really random numbers? What's the best way to get some random numbers from it (I'm thinking I'll just print them out and at least make sure that there are no visible patterns)? -- Gordon Worley http://www.crosswinds.net/~orla_redbird/ mailto:redbird@mac.com PGP Fingerprint: C462 FA84 B811 3501 9010 20D2 6EF3 77F7 BBD3 B003