Re: [GNU Crypto] PRNG and Base64

[Casey Marshall]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Sep 12, 2003 at 02:38:19PM -0000, Anthony Green wrote:

> Hello,
> 
> I've started using GNU Crypto for an app, so thank you very much!
> 
> I started using it before reading the README file, and quickly noticed
> that my random numbers didn't seem so random.  I'm wondering if it's
> possible for somebody not to notice...  My suggestion is that GNU Crypto
> _releases_ should have PRNG.REPRODUCABLE = false in order to help prevent
> a tragedy.
>
> I had to borrow a Base64 encoder/decoder from Bouncy Castle because I
> couldn't find one in GNU Crypto.  That might be a useful addition to
> gnu.crypto.util (or am I just not finding one?).  Would you accept a
> patch, or is this out of scope?
> 

The next version (2.0) looks like it will have a Base64 class; it's in
CVS right now in the class gnu.crypto.util.Base64.

<http://savannah.gnu.org/cgi-bin/viewcvs/*checkout*/gnu-crypto/gnu-crypto/source/gnu/crypto/util/Base64.java?rev=1.2&content-type=text/plain>

Besides, I think it's some sort of law: any major program that uses
cryptographic algorithms will have its own implementation of a Base64
encoder/decoder ;)

Cheers,

- -- 
Casey Marshall || address@hidden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/YsZNgAuWMgRGsWsRAhURAJ93OQcT+o4rW5ggpa4SxRw3460hywCfXJUX
0UoNx1qYHhBlh9SlaB4RfeI=
=3coV
-----END PGP SIGNATURE-----