<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><br>
On 06/09/2016 03:44 PM, Ethan Furman wrote:<br>
</div>
<blockquote cite="mid:5759F13B.2000909@stoneleaf.us" type="cite">On
06/09/2016 03:22 PM, Larry Hastings wrote:
<br>
<blockquote type="cite">
Okay, it's decided: os.urandom() must be changed for 3.5.2 to
never
<br>
block on a getrandom() call.
<br>
</blockquote>
<br>
One way to not block is to raise an exception. Since this is such
a rare occurrence anyway I don't see this being a problem, plus it
keeps everybody mostly happy: normal users won't see it hang,
crypto-folk won't see vulnerable-from-this-cause-by-default
machines, and those running Python early in the boot sequence will
have something they can figure out, plus an existing knob to work
around it [hashseed, I think?].<br>
</blockquote>
<br>
<br>
Nope, I want the old behavior back. os.urandom() should read
/dev/random if getrandom() would block. As the British say, "it
should do what it says on the tin".<br>
<br>
<br>
<i>/arry</i><br>
</body>
</html>