3 ms·
> I agree that just using the kernel's CSPRNG is the sanest solution to this mess. well, you agree up to the point you actually need to convert your words into
by giovannibajo1 12y ago
> I agree that just using the kernel's CSPRNG is the sanest solution to this mess.
well, you agree up to the point you actually need to convert your words into facts, at that point you don't agree anymore :)
https://github.com/AGWA/git-crypt/commit/34432e915e8415b112c09dc1a50366a457d0322e https://github.com/AGWA/git-crypt/commit/34432e915e8415b112c...
- agwa 12y agoOh boy, I should have seen this one coming :-) By "this mess" I meant the LibreSSL fork/chroot mess. I think crypto libraries should just use whatever the OS provides and not try to implement their own CSPRNGs. But git-crypt is a cross-platform application, not a crypto library. Implementing my own cross-platform wrapper around OS CSPRNGs would be decidedly less sane (and more error-prone) than just using the crypto library's CSPRNG, even if I disagree with how the library has done things.