Showing content from http://mail.python.org/pipermail/python-dev/attachments/20160609/73ef4ffb/attachment.html below:
<div dir="ltr">Larry Hastings wrote:<div><br></div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">On 3.4 and before, on Linux, os.urandom() would never block, but if the <br>entropy pool was uninitialized it could return very-very-poor-quality <br>random bits. On 3.5.0 and 3.5.1, on Linux, when using the getrandom() <br>call, it will instead block for an apparently unbounded period before <br>returning high-quality random bits.</blockquote><div><br></div><div>Just a point of information here. Ted Ts'o commented on the quality of the pre-initialization bits; it's not a given that they're "very very poor quality". Even before the per-boot entropy pool is initialized, the kernel has a few sources of randomness available to it - viz: interrupt timings, RDRAND (on x86) and a little per-machine data (uname -a). If RDRAND is trusted, this is enough to provide quite significant entropy, however that's not much help to all the ARM devices out there.</div><div><br></div><div>The most pressing issue from my perspective is the hash randomization initialization; as there is currently nothing a script author can do to influence its behavior (except setting PYTHONHASHSEED before invocation, which might not be an option).</div><div><br></div><div>It should be possible, at least conceptually, for Python to be used to implement /sbin/init. This isn't currently the case on Linux with Python 3.5.1 and Linux 3.17+</div><div><br></div><div>For what it's worth, I do agree with Larry that os.urandom() should hew as closely as possible to the OS-specific urandom implementation. Adding an optional "blocking" boolean flag might be a useful addition for 3.6.</div><div><br></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><div>Colm</div></div></blockquote><div><div> </div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><font size="1" color="#999999">Colm Buckley / <a href="mailto:colm@tuatha.org" target="_blank">colm@tuatha.org</a> / +353 87 2469146</font></div>
</div></div>
RetroSearch is an open source project built by @garambo
| Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4