Re: PRNG benchmark results and proposal

[Fyodor <fyodor () insecure org>]

On Mon, May 05, 2008 at 12:45:05AM +0000, Brandon Enright wrote:
> So, I propose we change all random number generation to use DNet's PRNG
> at all times.  It is fast, portable C, already included in Nmap, and
> quite a bit higher quality than we actually /need/.

Thanks for benchmarking.  Sounds good to me!

> I'd like someone to weigh in on BSD/GPL licensing conflicts before I
> proceed to either use rand.c or re-write rand.c for nbase_rnd.

I believe the BSD/GPL licensing conflict involves traditional BSD with
advertising clause.  Libdnet doesn't have that clause (see
nmap/libdnet-stripped/LICENSE).  So code from dnet's rand.c can be
used.  Of course the rand.c authors need to be credited in the code
(even if it is rewritten).

So I'm not opposed to rewriting the code if it is short, but we don't
have to either.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org