Message267917
> Second, unless you can guarantee you support blocking / non-blocking behavior on all platforms, this is a bad move.
Well, there are two options:
* Detect when os.urandom() is going to block, and falls back to weaker entropy (Linux: /dev/urandom in non-blocking mode, others: getpid+time?).
* Never use os.urandom() to seed random.Random when the randim module is imported: I suggest to discuss this option in the issue #27272
I would prefer to collect enough technical information before taking a decision (ensure that it's not possible to get a portable function to check if /dev/urandom is going to block.) |
|
Date |
User |
Action |
Args |
2016-06-08 22:29:41 | vstinner | set | recipients:
+ vstinner, larry, dstufft, Theodore Tso |
2016-06-08 22:29:41 | vstinner | set | messageid: <1465424981.05.0.542613649065.issue27266@psf.upfronthosting.co.za> |
2016-06-08 22:29:41 | vstinner | link | issue27266 messages |
2016-06-08 22:29:40 | vstinner | create | |
|