Re: [Lynx-dev] predictable PRNG used

[Michael S. Gilbert]

On Sun, 5 Jul 2009 13:19:17 -0400 (EDT) Thomas Dickey wrote:
> It depends - lynx's configure script looks for these pairs:
> 
> arc4random_push/arc4random
> arc4random_stir/arc4random 
> srandom/random
> srand48/lrand48
> srand/rand
> 
> On Debian/testing, it'll use srandom and random, whose manpage says 
> non-linear:
> 
>         The random() function uses a non-linear additive feedback random 
> number
>         generator employing a default table of size 31 long integers to  
> return
>         successive  pseudo-random numbers in the range from 0 to RAND_MAX.  
> The
>         period of this random number generator  is  very  large,  
> approximately
>         16*((2**31)-1).

right, and since none of this mentions anything about being
cryptographically secure, chances are that it is not.

mike