Re: Support getrandom() for pg_strong_random() source - Mailing list pgsql-hackers

From Daniel Gustafsson
Subject Re: Support getrandom() for pg_strong_random() source
Date
Msg-id 84FF81D8-6B0E-4D7D-A396-393595F66EEE@yesql.se
Whole thread Raw
In response to Re: Support getrandom() for pg_strong_random() source  (Jacob Champion <jacob.champion@enterprisedb.com>)
List pgsql-hackers
> On 6 Oct 2025, at 20:41, Jacob Champion <jacob.champion@enterprisedb.com> wrote:

> Are there any use cases other than UUID that want CSPRNG guarantees
> without needing CSPRNG security?

None come to mind, and it seems increasingly likely that designing API which we
confidently can document how to use is too complicated.  Maybe it's better to
re-focus on just the usecase in the UUID code and leave the API at pg_prng()
and pg_strong_random()?  (We already have UUID code in contrib which in some
cases use arc4random after all.)

--
Daniel Gustafsson




pgsql-hackers by date:

Previous
From: Daniel Gustafsson
Date:
Subject: Re: Support getrandom() for pg_strong_random() source
Next
From: Álvaro Herrera
Date:
Subject: Re: git head build failure