Browse Source

libarchive: backport rc4 crypto requirement update

Backport upstream libarchive commit 70f497f456 (As per Cryptographic
Requirements, 2017-03-19).  Discard more bytes of the RC4 keystream
to reduce the possibility of non-random bytes.
Brad King 8 years ago
parent
commit
18009aaf5e
1 changed files with 1 additions and 1 deletions
  1. 1 1
      Utilities/cmlibarchive/libarchive/archive_random.c

+ 1 - 1
Utilities/cmlibarchive/libarchive/archive_random.c

@@ -222,7 +222,7 @@ arc4_stir(void)
 	 * Discard early keystream, as per recommendations in:
 	 * "(Not So) Random Shuffles of RC4" by Ilya Mironov.
 	 */
-	for (i = 0; i < 1024; i++)
+	for (i = 0; i < 3072; i++)
 		(void)arc4_getbyte();
 	arc4_count = 1600000;
 }