700eb415 added the comment:

I'm reopening this for now as advised from the Linux getrandom() thread.

I agree we should not be using arc4random() blindly. However, in the long run 
it is a necessary change at least on OpenBSD. OpenBSD is not likely to create 
another syscall to avoid portability problems with OS X, so IMO it's best to 
utilize the existing calls on the system.

I'll work on some portable way of deterministically enabling it when needed and 
put a patch out for review. I think the payoff would be good when taking into 
account the security implications and cases where there are no available file 
descriptors.

Hopefully this could then be used as a template for getrandom() when 
implemented on Linux.

----------
status: closed -> open
versions: +Python 3.5 -Python 3.3

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue22542>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to