Hacker News Reader

Is it really wise to choose a random number generator based on RC4, which is known to have remarkably strong biases? Surely it would be better to use something based on ChaCha20, Keccak or Spritz if you have the choice?

View on HN

It does use ChaCha20, and the implementation will use something else in another 20 years most likely.

http://www.openbsd.org/papers/hackfest2014-arc4random/mgp000...

Serves me right for not reading through all the slides. I would argue that it's one of the more misleading function names out there, though.

Yes, it is misleading, it used to use rc4. Posix are proposing to standardise it under a new generic name, so it is unlikely to get changed until this happens.

Reply on news.ycombinator.com