News for hackers. Stuff that matters.

A comment on LibreSSL on Gentoo. Parent comment

Re:LibreSSL on Gentoo by AlyssaRowan on Saturday July 12, 2014 @05:49PM (#8025877)
Now that the glibc leadership changes have taken place, hopefully we can see functions like arc4random, explicit_bzero, timingsafe_bcmp, reallocarray and the other stuff actually appear in glibc where they belong, so no glue will be required.

They are pretty damn useful when you're trying to do secure programming.

(Of course, arc4random should use ChaCha20.)

[ Parent | on HN ]
Re:LibreSSL on Gentoo by dobbsbob on Saturday July 12, 2014 @06:38PM (#8025997)
the function name is arc4random but it's chacha20 http://marc.info/?l=openbsd-cvs&m=138065251627052&w=2
[ Parent | on HN ]
Re:LibreSSL on Gentoo by AlyssaRowan on Sunday July 13, 2014 @06:37AM (#8027068)
Indeed, that's my point: don't forget that the name is legacy and slightly misleading.

RC4 is about to get another public result against it, btw.

[ Parent | on HN ]
Re:LibreSSL on Gentoo by fafner on Sunday July 13, 2014 @08:02AM (#8027168)
I think there recently was a proposal for reallocarray in glibc. Not sure what happened to it though.
[ Parent | on HN ]