Re: Fortuna

Matt Mackall
2005-04-16T19:01:10Z

On Sat, Apr 16, 2005 at 10:05:55AM -0000, linux@horizon.com wrote:
> MErging e-mails, first from mpm@selenic.com:
> > You really ought to look at the _current_ implementation. There is no
> > SHA1 code in random.c.
>
> So I'm imagining the call to sha_transform() in 2.6.12-rc2's
> extract_buf()? The SHA1 code has been moved to lib/sha1.c, so there's
> no SHA1 code *lexically* in random.c, but that's a facile response;
> it's a cryptologically meaningless change.

No, it's exactly to the point: he's forked random.c before a large set
of changes that he needs to be aware of. The SHA1 code is now shared
by cryptolib and obviously no longer suffers from the (non-existent)
weakness he referenced.

--
Mathematics is the supreme nostalgia of our time.