Author dmalcolm
Recipients Arach, Arfrever, Huzaifa.Sidhpurwala, Jim.Jewett, Mark.Shannon, PaulMcMillan, Zhiping.Deng, alex, barry, benjamin.peterson, christian.heimes, dmalcolm, eric.snow, fx5, georg.brandl, grahamd, gregory.p.smith, gvanrossum, gz, haypo, jcea, lemburg, loewis, mark.dickinson, merwok, neologix, pitrou, skorgu, skrah, terry.reedy, tim.peters, v+python, zbysz
Date 2012-02-06.19:07:41
SpamBayes Score 1.33006e-08
Marked as misclassified No
Message-id <1328555211.3741.90.camel@surprise>
In-reply-to <1328508674.15.0.948121616701.issue13703@psf.upfronthosting.co.za>
Content
On Mon, 2012-02-06 at 06:11 +0000, Martin v. Löwis wrote:
> Martin v. Löwis <martin@v.loewis.de> added the comment:
> 
> IIUC, Win9x and NT4 are not supported anymore in any of the target releases of the patch, so calling CryptGenRandom should be fine.
> In a security fix release, we shouldn't change the linkage procedures, so I recommend that the LoadLibrary dance remains.

Thanks.

Am attaching tweaked versions of the 2012-02-01 patches, in which I've
removed the indecisive:
#if 1
       (void)win32_urandom((unsigned char *)secret, secret_size, 0);
#else
       /* fast but weak RNG (fast initialization, weak seed) */
       ...etc...
#endif

stuff, and simply use the first clause (win32_urandom) on Windows:
  add-randomization-to-2.6-dmalcolm-2012-02-06-001.patch 
  fix-broken-tests-on-2.6-dmalcolm-2012-02-06-001.patch 
  add-randomization-to-3.1-dmalcolm-2012-02-06-001.patch 
  fix-broken-tests-on-3.1-dmalcolm-2012-02-06-001.patch
Files
File name Uploaded
add-randomization-to-2.6-dmalcolm-2012-02-06-001.patch dmalcolm, 2012-02-06.19:07:31
add-randomization-to-3.1-dmalcolm-2012-02-06-001.patch dmalcolm, 2012-02-06.19:07:39
fix-broken-tests-on-2.6-dmalcolm-2012-02-06-001.patch dmalcolm, 2012-02-06.19:07:38
fix-broken-tests-on-3.1-dmalcolm-2012-02-06-001.patch dmalcolm, 2012-02-06.19:07:40
History
Date User Action Args
2012-02-06 19:07:47dmalcolmsetrecipients: + dmalcolm, lemburg, gvanrossum, tim.peters, loewis, barry, georg.brandl, terry.reedy, gregory.p.smith, jcea, mark.dickinson, pitrou, haypo, christian.heimes, benjamin.peterson, merwok, grahamd, Arfrever, v+python, alex, zbysz, skrah, gz, neologix, Arach, Mark.Shannon, eric.snow, Zhiping.Deng, Huzaifa.Sidhpurwala, Jim.Jewett, PaulMcMillan, fx5, skorgu
2012-02-06 19:07:45dmalcolmlinkissue13703 messages
2012-02-06 19:07:41dmalcolmcreate