From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by sourceware.org (Postfix) with ESMTPS id 8DAE53858D28 for ; Mon, 18 Jul 2022 14:49:50 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 8DAE53858D28 Received: from mimecast-mx02.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-392-ri2gTiIjMuKlyP3M1Hv_CQ-1; Mon, 18 Jul 2022 10:49:47 -0400 X-MC-Unique: ri2gTiIjMuKlyP3M1Hv_CQ-1 Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.rdu2.redhat.com [10.11.54.2]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 18C9A2813D57; Mon, 18 Jul 2022 14:49:19 +0000 (UTC) Received: from oldenburg.str.redhat.com (unknown [10.39.193.9]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 2B71440C128A; Mon, 18 Jul 2022 14:49:18 +0000 (UTC) From: Florian Weimer To: Cristian =?utf-8?Q?Rodr=C3=ADguez?= Cc: Adhemerval Zanella , libc-alpha@sourceware.org Subject: Re: [PATCH v10 9/9] manual: Add documentation for arc4random functions References: <20220714112845.704678-1-adhemerval.zanella@linaro.org> <20220714112845.704678-10-adhemerval.zanella@linaro.org> <87h73ezh0d.fsf@oldenburg.str.redhat.com> Date: Mon, 18 Jul 2022 16:49:16 +0200 In-Reply-To: ("Cristian =?utf-8?Q?Rodr=C3=ADguez=22's?= message of "Mon, 18 Jul 2022 10:43:36 -0400") Message-ID: <87wncaxyqb.fsf@oldenburg.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.84 on 10.11.54.2 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-5.5 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jul 2022 14:49:52 -0000 * Cristian Rodr=C3=ADguez: >> I think it's more important to make sure that unmodified glibc can be >> used in a certified environment. Our implementation is not certifiable >> because it's not using an approved algorithm. The OpenBSD >> implementation has the same issue: in a certified environment, it either >> has not be documented as not cryptographically secure, or it has to be >> implemented on top of an approved algorithm. > In that case the linux kernel is also non certified.. whatever..maybe > omit the paragraph all together. These certified configurations already need a patched/custom kernel. But we don't want to add a patched glibc as an additional burden. Thanks, Florian