interesting
/
getdns
mirror of https://github.com/getdnsapi/getdns.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

arc4random in secret generation

This commit is contained in:
Willem Toorop 2015-03-22 11:01:37 -05:00
parent d06d94a0c7
commit 19547536ac
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/stub.c
View File

@ -58,13 +58,13 @@ rollover_secret()
* boundry with old cookie. * boundry with old cookie.
*/ */
prev_secret = secret; prev_secret = secret;
secret = (ldns_get_random() << 16) | ldns_get_random(); secret = arc4random();
/* Next rollover over EDNS_COOKIE_ROLLOVER_TIME with 30% jitter, /* Next rollover over EDNS_COOKIE_ROLLOVER_TIME with 30% jitter,
* I.e. some offset + or - 15% of the future point in time. * I.e. some offset + or - 15% of the future point in time.
*/ */
secret_rollover_time = now + (EDNS_COOKIE_ROLLOVER_TIME / 20 * 17) secret_rollover_time = now + (EDNS_COOKIE_ROLLOVER_TIME / 20 * 17)
+ (ldns_get_random()%(EDNS_COOKIE_ROLLOVER_TIME / 10 * 3)); + arc4random_uniform(EDNS_COOKIE_ROLLOVER_TIME / 10 * 3);
} }
static void static void