News for hackers. Stuff that matters.

A comment on Myths about /dev/urandom (2014). Parent comment

Re:Myths about /dev/urandom (2014) by eddieh on Thursday January 05, 2017 @10:11PM (#13333609)
The 'arc4' no longer refers to RC4 on macOS/iOS and OpenBSD. On those systems 'arc4random' is playfully a bacronym for "A Replacement Call for Random". The new arc4random* implementation will now be replaced as cryptographic techniques advance.

It appears the Apple and OpenBSD implementations use the getentropy syscall and then add additional entropy mixing.

[ Parent | on HN ]
Re:Myths about /dev/urandom (2014) by gbrown_ on Friday January 06, 2017 @04:53AM (#13335104)
Yup, OpenBSD have even changed calls to other entropy sources to returning strong random by default from arc4random.

http://marc.info/?l=openbsd-cvs&m=141807513728073&w=2

[ Parent | on HN ]
Re:Myths about /dev/urandom (2014) by arthur2e5 on Friday January 06, 2017 @10:10AM (#13336809)
libbsd is also using getentropy: https://cgit.freedesktop.org/libbsd/tree/src/arc4random.c
[ Parent | on HN ]