From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wr1-f53.google.com (mail-wr1-f53.google.com [209.85.221.53]) by sourceware.org (Postfix) with ESMTPS id EB4E938582AE for ; Mon, 25 Jul 2022 18:33:17 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org EB4E938582AE Received: by mail-wr1-f53.google.com with SMTP id h8so17196097wrw.1 for ; Mon, 25 Jul 2022 11:33:17 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=9+idQqBWdX5mURxuBE4eJRKFRCSZyA5bMwG+uu+jVjQ=; b=gsZuvvPGiRoI2o8JSr0E7poa4RRKkdxoNgKj4GgGb3kAdQ7ntFMfbLDZYS2Vu0caq8 wAiSNrdzFqOhIEQHuVKTg8qhLb/Z6e63iCUqSJebehCerZEvtxu2/DbWQ4chjN/PIBdL SWzZVN2cfbKbPPfm9hxIFMAMShhnyq6TV1Mdtf4tnU0QRAn4hG9BeAT3Da3G/RX7NnD8 yE+0qh0LIk0YiN8d3YnzfFcRDrcpMtFv57bb20nCRm2G6l8TurpmJXr1n346QotA5z6l n19DjX3Wvw0An6EinGA9S5gs2PoRtav879EmWvtMplcT5tT5+ShQ9xhEvPqfubgQsMpB yIFA== X-Gm-Message-State: AJIora8cuZgX7As6zMq9sVpfy9cXalrQ28vc8J123IgzFlm3G/zoMnEi yBrno98vVNZwSwWM0Cdbn7aK9p3P4tSN7DpCIHT9sCp/3/E= X-Google-Smtp-Source: AGRyM1vCQBlffxosb8FcohFVhZ2TyRzrfS+NGXNuzNr12iMwXx+yS5qzGF7Zz/f71RCgHnvZ9q+jc2xgbhfhELxpZew= X-Received: by 2002:a5d:584f:0:b0:21d:bcd6:5c8e with SMTP id i15-20020a5d584f000000b0021dbcd65c8emr8287218wrf.60.1658773996917; Mon, 25 Jul 2022 11:33:16 -0700 (PDT) MIME-Version: 1.0 References: <6bf352e9-1312-40de-4733-3219721b343c@linaro.org> <20220725153303.GF7074@brightrain.aerifal.cx> <878rohp2ll.fsf@oldenburg.str.redhat.com> <20220725174430.GI7074@brightrain.aerifal.cx> In-Reply-To: <20220725174430.GI7074@brightrain.aerifal.cx> From: =?UTF-8?Q?Cristian_Rodr=C3=ADguez?= Date: Mon, 25 Jul 2022 14:33:05 -0400 Message-ID: Subject: Re: arc4random - are you sure we want these? To: Rich Felker Cc: Florian Weimer , Yann Droneaud , jann@thejh.net, "Jason A. Donenfeld" , libc-alpha@sourceware.org, Michael@phoronix.com Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jul 2022 18:33:20 -0000 On Mon, Jul 25, 2022 at 1:44 PM Rich Felker wrote: > Then don't fallback to /dev/urandom. Those are my thoughts as well.. but __libc_fatal() if there is no usable getrandom syscall with the needed semantics, in short making this interface usable only when the kernel is. This is quite drastic, but probably the only sane way to go.