From owner-cvs-src@FreeBSD.ORG Sun Aug 24 01:27:30 2003 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 94B1316A4C1; Sun, 24 Aug 2003 01:27:30 -0700 (PDT) Received: from storm.FreeBSD.org.uk (storm.FreeBSD.org.uk [194.242.157.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0234F43FF7; Sun, 24 Aug 2003 01:27:29 -0700 (PDT) (envelope-from mark@grondar.org) Received: from storm.FreeBSD.org.uk (Ugrondar@localhost [127.0.0.1]) by storm.FreeBSD.org.uk (8.12.9/8.12.9) with ESMTP id h7O8RQJF098226; Sun, 24 Aug 2003 09:27:26 +0100 (BST) (envelope-from mark@grondar.org) Received: (from Ugrondar@localhost)h7O8RP5l098225; Sun, 24 Aug 2003 09:27:25 +0100 (BST) X-Authentication-Warning: storm.FreeBSD.org.uk: Ugrondar set sender to mark@grondar.org using -f Received: from grondar.org (localhost [127.0.0.1])h7O8QUOI060733; Sun, 24 Aug 2003 09:26:30 +0100 (BST) (envelope-from mark@grondar.org) From: Mark Murray Message-Id: <200308240826.h7O8QUOI060733@grimreaper.grondar.org> To: Mike Silbersack In-Reply-To: Your message of "Sat, 23 Aug 2003 11:55:58 CDT." <20030823115345.N7877@odysseus.silby.com> Date: Sun, 24 Aug 2003 09:26:30 +0100 Sender: mark@grondar.org X-Spam-Status: No, hits=0.2 required=5.0 tests=EMAIL_ATTRIBUTION,FROM_NO_LOWER,IN_REP_TO, QUOTED_EMAIL_TEXT,REPLY_WITH_QUOTES version=2.55 X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) cc: Poul-Henning Kamp cc: src-committers@FreeBSD.org cc: cvs-src@FreeBSD.org cc: Sam Leffler cc: David Schultz cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/libkern arc4random.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Aug 2003 08:27:30 -0000 Mike Silbersack writes: > > http://www.csua.berkeley.edu/~das/marsaglia/ . > > I can run it again if there's interest. > > Can you turn it into a port? :) That would be nifty :-) > > I'm not a cryptographer, but FWIW, I'm told that there are > > statistical tests that can differentiate an ARC4 sequence from a > > truly random sequence. However, it takes something like 2^31 bits > > of data to detect the statistical bias. > > According to the paper referenced in the comment, the pattern is > *especially* apparent in the first 256 words of output, which is why they > should be thrown out. (From my original reading of the paper, I was > unable to determine if by his terminology he meant the first 256 bytes, > words, dwords, quadwords, or what. So I throw away the first 256 dwords, > just to be safe.) It is the first 2048 _bits_. Throwing away more doesn't hurt. M -- Mark Murray iumop ap!sdn w,I idlaH