8000 Find strategy on getting 16 bytes of entropy and existing API (XML_SetHashSalt) together · Issue #47 · libexpat/libexpat · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Find strategy on getting 16 bytes of entropy and existing API (XML_SetHashSalt) together #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
hartwork opened this issue Jun 17, 2017 · 0 comments
Open

Find strategy on getting 16 bytes of entropy and existing API (XML_SetHashSalt) together #47

hartwork opened this issue Jun 17, 2017 · 0 comments

Comments

@hartwork
Copy link
Member

Since version 2.1.0 Expat has a function

int XML_SetHashSalt(XML_Parser parser, unsigned long hash_salt)

to provide sizeof(unsigned long) custom entropy bytes to Expat.
Now SipHash introduced with #39 can leverage up to 16 bytes of entropy and the new high quality sources of entropy from #30 can be made to serve 16 bytes to us.

Open questions are:

  • If we start extracting more than 16 bytes of entropy without user salt given, what should happen when users pass fewer tha 16 bytes by calling XML_SetHashSalt? (Ignore, error out, use and pad, use and mix, ...)
  • Do we need a new API function to set a callback function writing 16 bytes of entropy to us?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hartwork
0