Re: DIGEST-MD5 and {nonce,cnonce}

[Ed Carp <erc@khijol.org>]

> >Most UNIX implementations implement rand() and friends.  Even Solaris ;)
> 
> Rand(3) provides a sequence of psuedo-random numbers.  The
> amount of entropy in these numbers cannot be greater than
> the seed used to determine the sequence.
> 
> It is not appropriate to use rand(3) to obtain bits of
> entropy.

Why not, if properly seeded?  Must UNIX implementations can give you the
time of day and date down to the millisecond, and that can be used to seed
rand()
--
Ed Carp, N7EKG  	erc@pobox.com		940/367-2744 cell phone

Visit http://www.linux-usa.net - Plug-n-Go Linux servers for small business
                                 "Plug it in - Turn it on - You're Done!"