Re: [PATCH] using arc4random for strong randomness matters. - Mailing list pgsql-hackers

From Andres Freund
Subject Re: [PATCH] using arc4random for strong randomness matters.
Date
Msg-id 20171122164243.xw34y5oo6oak6rel@alap3.anarazel.de
Whole thread Raw
In response to Re: [PATCH] using arc4random for strong randomness matters.  (David CARLIER <devnexen@gmail.com>)
List pgsql-hackers
Hi,

Please don't top-quote on postgres mailing lists.


On 2017-11-22 16:16:35 +0000, David CARLIER wrote:
> > David CARLIER <devnexen@gmail.com> writes:
> > > I m not against as such that depends of the implementation but I ve seen
> > in
> > > quick glance it s RC4 ?
> >
> > More generally, why should we bother with an additional implementation?
> > Is this better than /dev/urandom, and if so why?

> Basically the call never fails, always generating high quality random data
> (especially the implementations based on Chacha* family, RC4 has
> predictability issues), there is no need of a file descriptor.

I don't really see much benefit in those properties for postgres
specifically. Not needing an fd is nice for cases where you're not
guaranteed to have access to a filesystem, but postgres isn't going to
work in those cases anyway.

Greetings,

Andres Freund


pgsql-hackers by date:

Previous
From: David CARLIER
Date:
Subject: Re: [PATCH] using arc4random for strong randomness matters.
Next
From: ilmari@ilmari.org (Dagfinn Ilmari Mannsåker)
Date:
Subject: Re: [PATCH] using arc4random for strong randomness matters.