[Bug 28990] LibUUID dependency problematic for OSX and Windows

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=28990

--- Comment #9 from Simon McVittie <simon.mcvittie at collabora.co.uk> 2010-10-04 05:10:41 PDT ---
> +  /* Fill with random. The g_random_int() call uses Mersenne Twister PRNG
> +   * seeded with /dev/random or the current time, which comply with
> +   * RFC4122 requirement.

That's the "general-purpose PRNG with a relatively small amount of state" that
I mentioned previously. RFC4122 says:

   See Section 4.5 for a discussion on random numbers.

and in that section

   A better solution is to obtain a 47-bit cryptographic quality random
   number
...
   Advice on generating cryptographic-quality random numbers can be
   found in RFC1750 [5].

Reference [5] is in fact to RFC4086, which obsoletes RFC1750, and discusses
/dev/random and Windows' CryptGenRandom.

Since Qt is LGPL these days, porting the Qt implementation (which Will linked
above) to C might be a good basis for UUID generation.

It'd also be reasonable to have Gabble/telepathy-glib support both e2fsprogs
uuid and OSSP uuid: see Bug #22972 for more background on that (and why uuid.h
could come from either!).

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.