Rene,

> Miguel
>
> > I was analyzing the RNG routines of OpenSSL, especially
> > those related with Windows environment, RAND_screen seeds
> > the random generator with the contents of the screen. It
> > seems to be a poor RNG.
> > Anybody has a better RNG for Windows?
> >
> > Any ideas, suggestions, or help would be most appreciated.
>
> Do you mean the RNG or the generation of the seed?
> In case of seed there are some techniques to generate
> a good software seed and I've implemented one
> (not in openssl) which has been approved by a "big company".
>
> Please explain why you have the opinion that the "RNG" is poor.
>
> Regards Rene
>
> Rene G. Eberhard
> Mail  : [EMAIL PROTECTED]
>

I mean the generation of the seed.
On a Windows environment, RAND_screen() takes the
contents of the screen, these bitmaps are hashed
(MD5) and then seeds the RNG.

Due to a part or fraction of the screen could stay
constant (several hashes could stay constant), so
several RNG inputs could stay constant.
IMHO it seems to be a poor RNG.

Thank you,
Miguel Angel




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to