Re: Sufficiently safe random information for security-critical Guile applications

Hi :) Josh (and the manual) is right -- don't use Guile's RNG for security-sensitive purposes. Mostly it's just for games, monte-carlo simulations and the like. I wish it were a CSPRNG but it's not; oh well. The quality of the PRNG is a separate issue. MWC could be improved, but JS impls at le

Re: Sufficiently safe random information for security-critical Guile applications

Josh Datko writes: > On Fri, 2016-08-26 at 14:59 -0500, Christopher Allan Webber wrote: >> Hello!So, as some of you know, I'm working on a federation >> implementation in Guile.This needs a few things: >> >> - Random tokens which won't collide, for various purposes > > There's a function in libgc

Re: Sufficiently safe random information for security-critical Guile applications

On Fri, 2016-08-26 at 14:59 -0500, Christopher Allan Webber wrote: > Hello!  So, as some of you know, I'm working on a federation > implementation in Guile.  This needs a few things: > >  - Random tokens which won't collide, for various purposes There's a function in libgcrypt, gcry_create_nonce.

Sufficiently safe random information for security-critical Guile applications

Hello! So, as some of you know, I'm working on a federation implementation in Guile. This needs a few things: - Random tokens which won't collide, for various purposes - The ability to generate a solid random key, which is used for... - The ability to generate an HMAC (for signed cooke based