Re: rsaenh

[Alexandre Julliard]

Juan Lang  writes:
> --- Alexandre Julliard  wrote:
> > That doesn't mean we want to block, especially for things like
> > CPGenRandom that don't require the highest quality randomness.
>
> Wait, why don't we require that much randomness?  That doesn't make sense
> to me; we don't know what the expectations of the caller are.

That's why /dev/urandom is a better choice. The randomness is good
enough for the vast majority of uses, and it doesn't block the process
for no good reason. /dev/random should be used only when we
specifically know that anything less than highest randomness is
unacceptable.