[Bug libc/4417] New: arc4random function addition

[Bug libc/4417] New: arc4random function addition

[robert at linuxfromscratch dot org]

Hello. I'm attaching patches for adding the arc4random(3) library function. The 
patch includes a manual page. This function uses the free Arcfour (another-rc4) 
stream cipher, seeded with entropy. This function is intended for 
non-cryptographic uses, such as for mktemp.

As-is this patch takes 128 bits from /dev/urandom, or gettimeofday/getpid 
if /dev/urandom is not available. This can be more flexable, to use hp-timing. 
I would suggest arc4random() is used in place of hp-timing throughout the Glibc 
package, with the exception of the stack protector (for performance reasons), 
and use hp-timing in arc4random.c.

-- 
           Summary: arc4random function addition
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: enhancement
          Priority: P3
         Component: libc
        AssignedTo: drepper at redhat dot com
        ReportedBy: robert at linuxfromscratch dot org
                CC: glibc-bugs at sources dot redhat dot com


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[robert at linuxfromscratch dot org]

------- Additional Comments From robert at linuxfromscratch dot org  2007-04-24 04:24 -------
Created an attachment (id=1734)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=1734&action=view)
--with-prng-device patch

This patch adds --with-prng-device= to allow users to specify their
/dev/urandom or /dev/arandom or /dev/erandom, to use with ssp and arc4random,
and future.

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[robert at linuxfromscratch dot org]

------- Additional Comments From robert at linuxfromscratch dot org  2007-04-24 04:26 -------
Created an attachment (id=1735)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=1735&action=view)
arc4random() patch

This patch adds the arc4random() code. It depends on the prng patch to build it
as-is.

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[robert at linuxfromscratch dot org]

------- Additional Comments From robert at linuxfromscratch dot org  2007-04-24 04:28 -------
Created an attachment (id=1736)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=1736&action=view)
arc4random mktemp/tempname patch

This patch is for tempname.c to make mktemp, and friends, use arc4random().

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[robert at linuxfromscratch dot org]

------- Additional Comments From robert at linuxfromscratch dot org  2007-04-24 07:48 -------
In resolv/res_init.c, res_randomid() could use arc4random() instead of 
getpid().

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[drepper at redhat dot com]

------- Additional Comments From drepper at redhat dot com  2007-04-24 19:52 -------
glibc is no dumping ground for arbitrary code.  The existing code is just find.
 Put your code in separate libraries.

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX


http://sourceware.org/bugzilla/show_bug.cgi?id=4417

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/4417] arc4random function addition

[adhemerval.zanella at linaro dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=4417

Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |adhemerval.zanella at linaro dot o
                   |                            |rg

--- Comment #8 from Adhemerval Zanella <adhemerval.zanella at linaro dot org> ---
I am working on a new version for arc4random.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug libc/4417] arc4random function addition

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=4417

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|fweimer at redhat dot com          |adhemerval.zanella at linaro dot o
                   |                            |rg

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug libc/4417] arc4random function addition

[adhemerval.zanella at linaro dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=4417

Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.36

--- Comment #9 from Adhemerval Zanella <adhemerval.zanella at linaro dot org> ---
Added on 2.36.

-- 
You are receiving this mail because:
You are on the CC list for the bug.