4 ms·
This does not actually seed the PRNG. User-provided data is not entropy: entropy needs to be random, not deterministic. In OpenSSL, PRNGs are pluggable, as we
by jwise0 12y ago
This does not actually seed the PRNG. User-provided data is not entropy: entropy needs to be random, not deterministic. In OpenSSL, PRNGs are pluggable, as well, which means that some modes of seeding the PRNG could actually leak sensitive user data out of the process!
This code shouldn't have been there in the first place, and wasn't doing any good.