February 2019 - tor-commits - lists.torproject.org

[torspec/master] Merge branch 'ope_spec2'
by nickm＠torproject.org 15 Feb '19

15 Feb '19

commit 4a3c3584d423d3f3e5de9ac556d001248d5d1c8f Merge: 68aebed 85e8d6e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Feb 15 07:02:11 2019 -0500 Merge branch 'ope_spec2' rend-spec-v3.txt | 78 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 78 insertions(+)

1 0

[torspec/master] Appendix to rend-spec.txt about how to generate revision counters
by nickm＠torproject.org 15 Feb '19

15 Feb '19

commit 85e8d6e829e89ff58302f4f628c70ff4e8de2f8a Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu May 10 18:20:09 2018 -0400 Appendix to rend-spec.txt about how to generate revision counters --- rend-spec-v3.txt | 78 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 78 insertions(+) diff --git a/rend-spec-v3.txt b/rend-spec-v3.txt index 728f38f..8b3996b 100644 --- a/rend-spec-v3.txt +++ b/rend-spec-v3.txt @@ -2396,3 +2396,81 @@ Appendix E. Managing authorized client data [CLIENT-AUTH-MGMT] [XXX what happens when people use both the control port interface and the filesystem interface?] +Appendix F. Two methods for managing revision counters. + + Implementations MAY generate revision counters in any way they please, + so long as they are monotonically increasing over the lifetime of each + blinded public key. But to avoid fingerprinting, implementors SHOULD + choose a strategy also used by other Tor implementations. Here we + describe two, and additionally list some strategies that implementors + should NOT use. + + F.1. Increment-on-generation + + This is the simplest strategy, and the one used by Tor through at + least version 0.3.4.0-alpha. + + Whenever using a new blinded key, the service records the + highest revision counter it has used with that key. When generating + a descriptor, the service uses the smallest non-negative number + higher than any number it has already used. + + In other words, the revision counters under this system start fresh + with each blinded key as 0, 1, 2, 3, and so on. + + F.2. Encrypted time in period + + This scheme is what we recommend for situations when multiple + service instances need to coordinate their revision counters, + without an actual coordination mechanism. + + Let T be the number of seconds that have elapsed since the descriptor + became valid, plus 1. (T must be at least 1.) Implementations can use the + number of seconds since the start time of the shared random protocol run + that corresponds to this descriptor. + + Let S be a secret that all the service providers share. For + example, it could be the private signing key corresponding to the + current blinded key. + + Let K be an AES-256 key, generated as + K = H("rev-counter-generation" | S) + + Use K, and AES in counter mode with IV=0, to generate a stream of T + * 2 bytes. Consider these bytes as a sequence of T 16-bit + little-endian words. Add these words. + + Let the sum of these words be the revision counter. + + + Cryptowiki attributes roughly this scheme to G. Bebek in: + + G. Bebek. Anti-tamper database research: Inference control + techniques. Technical Report EECS 433 Final Report, Case + Western Reserve University, November 2002. + + Although we believe it is suitable for use in this application, it + is not a perfect order-preserving encryption algorithm (and all + order-preserving encryption has weaknesses). Please think twice + before using it for anything else. + + (This scheme can be optimized pretty easily by caching the encryption of + X*1, X*2, X*3, etc for some well chosen X.) + + For a slow reference implementation, see src/test/ope_ref.py in the + Tor source repository. [XXXX for now, see the same file in Nick's + "ope_hax" branch -- it isn't merged yet.] + + This scheme is not currently implemented in Tor. + + F.X. Some revision-counter strategies to avoid + + Though it might be tempting, implementations SHOULD NOT use the + current time or the current time within the period directly as their + revision counter -- doing so leaks their view of the current time, + which can be used to link the onion service to other services run on + the same host. + + Similarly, implementations SHOULD NOT let the revision counter + increase forever without resetting it -- doing so links the service + across changes in the blinded public key.

1 0

[translation/tor-launcher-properties_completed] Update translations for tor-launcher-properties_completed
by translation＠torproject.org 15 Feb '19

15 Feb '19

commit a96f500b9ff07b66465dcdd5de9083b634ce9f91 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Feb 15 09:19:32 2019 +0000 Update translations for tor-launcher-properties_completed --- ka/torlauncher.properties | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/ka/torlauncher.properties b/ka/torlauncher.properties index b1f17ec98..3914a2f46 100644 --- a/ka/torlauncher.properties +++ b/ka/torlauncher.properties @@ -52,15 +52,31 @@ torlauncher.forAssistance2=დახმარებისთვის ეწვ torlauncher.copiedNLogMessages=ასლის აღება დასრულებულია. %S Tor-ის აღრიცხვის ჩანაწერები მზადაა ტექსტურ რედაქტორში ან ელფოსტის წერილში ჩასასმელად. -torlauncher.bootstrapStatus.conn_dir=გადამცემთა ცნობართან დაკავშირება -torlauncher.bootstrapStatus.handshake_dir=დაშიფრული კავშირის დამყარება ცნობართან +torlauncher.bootstrapStatus.starting=გაშვება +torlauncher.bootstrapStatus.conn_pt=ხიდთან დაკავშირება +torlauncher.bootstrapStatus.conn_done_pt=ხიდთან დაკავშირებულია +torlauncher.bootstrapStatus.conn_proxy=პროქსისთან დაკავშირება +torlauncher.bootstrapStatus.conn_done_proxy=პროქსისთან დაკავშირებულია +torlauncher.bootstrapStatus.conn=Tor-გადამცემთან დაკავშირება +torlauncher.bootstrapStatus.conn_done=Tor-გადამცემთან დაკავშირებულია +torlauncher.bootstrapStatus.handshake=Tor-გადამცემთან კავშირის დამოწმება +torlauncher.bootstrapStatus.handshake_done=Tor-გადამცემთან კავშირი დამოწმებულია +torlauncher.bootstrapStatus.onehop_create=დაშიფრული კავშირის დამყარება ცნობართან torlauncher.bootstrapStatus.requesting_status=ქსელის მდგომარეობის დადგენა torlauncher.bootstrapStatus.loading_status=ქსელის მდგომარეობის ჩატვირთვა torlauncher.bootstrapStatus.loading_keys=უფლებამოსილი სერტიფიკატების ჩატვირთვა torlauncher.bootstrapStatus.requesting_descriptors=გადამცემის მონაცემების მოთხოვნა torlauncher.bootstrapStatus.loading_descriptors=გადამცემის მონაცემების ჩატვირთვა -torlauncher.bootstrapStatus.conn_or=უკავშირდება Tor-ქსელს -torlauncher.bootstrapStatus.handshake_or=იქმნება Tor-ის წრედი +torlauncher.bootstrapStatus.enough_dirinfo=გადამცემის მონაცემები ჩაიტვირთა +torlauncher.bootstrapStatus.ap_conn_pt=წრედების შექმნა: ხიდთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done_pt=წრედების შექმნა: ხიდთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_conn_proxy=წრედების შექმნა: პროქსისთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done_proxy=წრედების შექმნა: პროქსისთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_conn=წრედების შექმნა: Tor-გადამცემთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done=წრედების შექმნა: Tor-გადამცემთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_handshake=წრედების შექმნა: Tor-ქსელთან კავშირის დამოწმება +torlauncher.bootstrapStatus.ap_handshake_done=წრედების შექმნა: Tor-ქსელთან კავშირი დამოწმებულია +torlauncher.bootstrapStatus.circuit_create=წრედების შექმნა: Tor-წრედის დამყარება torlauncher.bootstrapStatus.done=Tor-ქსელთან დაკავშირებულია! torlauncher.bootstrapWarning.done=მზადაა

1 0

[translation/tor-launcher-properties] Update translations for tor-launcher-properties
by translation＠torproject.org 15 Feb '19

15 Feb '19

commit 8f945b395589f633e83fda340d24336afa80e13f Author: Translation commit bot <translation(a)torproject.org> Date: Fri Feb 15 09:19:26 2019 +0000 Update translations for tor-launcher-properties --- ka/torlauncher.properties | 38 +++++++++++++++++++------------------- 1 file changed, 19 insertions(+), 19 deletions(-) diff --git a/ka/torlauncher.properties b/ka/torlauncher.properties index cdfa9476b..3914a2f46 100644 --- a/ka/torlauncher.properties +++ b/ka/torlauncher.properties @@ -52,31 +52,31 @@ torlauncher.forAssistance2=დახმარებისთვის ეწვ torlauncher.copiedNLogMessages=ასლის აღება დასრულებულია. %S Tor-ის აღრიცხვის ჩანაწერები მზადაა ტექსტურ რედაქტორში ან ელფოსტის წერილში ჩასასმელად. -torlauncher.bootstrapStatus.starting=Starting -torlauncher.bootstrapStatus.conn_pt=Connecting to bridge -torlauncher.bootstrapStatus.conn_done_pt=Connected to bridge -torlauncher.bootstrapStatus.conn_proxy=Connecting to proxy -torlauncher.bootstrapStatus.conn_done_proxy=Connected to proxy -torlauncher.bootstrapStatus.conn=Connecting to a Tor relay -torlauncher.bootstrapStatus.conn_done=Connected to a Tor relay -torlauncher.bootstrapStatus.handshake=Negotiating with a Tor relay -torlauncher.bootstrapStatus.handshake_done=Finished negotiating with a Tor relay +torlauncher.bootstrapStatus.starting=გაშვება +torlauncher.bootstrapStatus.conn_pt=ხიდთან დაკავშირება +torlauncher.bootstrapStatus.conn_done_pt=ხიდთან დაკავშირებულია +torlauncher.bootstrapStatus.conn_proxy=პროქსისთან დაკავშირება +torlauncher.bootstrapStatus.conn_done_proxy=პროქსისთან დაკავშირებულია +torlauncher.bootstrapStatus.conn=Tor-გადამცემთან დაკავშირება +torlauncher.bootstrapStatus.conn_done=Tor-გადამცემთან დაკავშირებულია +torlauncher.bootstrapStatus.handshake=Tor-გადამცემთან კავშირის დამოწმება +torlauncher.bootstrapStatus.handshake_done=Tor-გადამცემთან კავშირი დამოწმებულია torlauncher.bootstrapStatus.onehop_create=დაშიფრული კავშირის დამყარება ცნობართან torlauncher.bootstrapStatus.requesting_status=ქსელის მდგომარეობის დადგენა torlauncher.bootstrapStatus.loading_status=ქსელის მდგომარეობის ჩატვირთვა torlauncher.bootstrapStatus.loading_keys=უფლებამოსილი სერტიფიკატების ჩატვირთვა torlauncher.bootstrapStatus.requesting_descriptors=გადამცემის მონაცემების მოთხოვნა torlauncher.bootstrapStatus.loading_descriptors=გადამცემის მონაცემების ჩატვირთვა -torlauncher.bootstrapStatus.enough_dirinfo=Finished loading relay information -torlauncher.bootstrapStatus.ap_conn_pt=Building circuits: Connecting to bridge -torlauncher.bootstrapStatus.ap_conn_done_pt=Building circuits: Connected to bridge -torlauncher.bootstrapStatus.ap_conn_proxy=Building circuits: Connecting to proxy -torlauncher.bootstrapStatus.ap_conn_done_proxy=Building circuits: Connected to proxy -torlauncher.bootstrapStatus.ap_conn=Building circuits: Connecting to a Tor relay -torlauncher.bootstrapStatus.ap_conn_done=Building circuits: Connected to a Tor relay -torlauncher.bootstrapStatus.ap_handshake=Building circuits: Negotiating with a Tor relay -torlauncher.bootstrapStatus.ap_handshake_done=Building circuits: Finished negotiating with a Tor relay -torlauncher.bootstrapStatus.circuit_create=Building circuits: Establishing a Tor circuit +torlauncher.bootstrapStatus.enough_dirinfo=გადამცემის მონაცემები ჩაიტვირთა +torlauncher.bootstrapStatus.ap_conn_pt=წრედების შექმნა: ხიდთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done_pt=წრედების შექმნა: ხიდთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_conn_proxy=წრედების შექმნა: პროქსისთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done_proxy=წრედების შექმნა: პროქსისთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_conn=წრედების შექმნა: Tor-გადამცემთან დაკავშირება +torlauncher.bootstrapStatus.ap_conn_done=წრედების შექმნა: Tor-გადამცემთან დაკავშირებულია +torlauncher.bootstrapStatus.ap_handshake=წრედების შექმნა: Tor-ქსელთან კავშირის დამოწმება +torlauncher.bootstrapStatus.ap_handshake_done=წრედების შექმნა: Tor-ქსელთან კავშირი დამოწმებულია +torlauncher.bootstrapStatus.circuit_create=წრედების შექმნა: Tor-წრედის დამყარება torlauncher.bootstrapStatus.done=Tor-ქსელთან დაკავშირებულია! torlauncher.bootstrapWarning.done=მზადაა

1 0

[translation/tails-misc_completed] Update translations for tails-misc_completed
by translation＠torproject.org 15 Feb '19

15 Feb '19

commit 406041c4203e0d6963b84ca3ce49efbc84b2e90d Author: Translation commit bot <translation(a)torproject.org> Date: Fri Feb 15 06:16:23 2019 +0000 Update translations for tails-misc_completed --- de.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/de.po b/de.po index 81b1ee456..4a982c947 100644 --- a/de.po +++ b/de.po @@ -37,8 +37,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2019-01-14 21:20+0100\n" -"PO-Revision-Date: 2019-01-19 14:25+0000\n" -"Last-Translator: Not AName <atzeje(a)web.de>\n" +"PO-Revision-Date: 2019-02-15 05:59+0000\n" +"Last-Translator: Thomas Oberndörfer <thomas(a)mailvelope.com>\n" "Language-Team: German (http://www.transifex.com/otf/torproject/language/de/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n"

1 0

[translation/tails-misc] Update translations for tails-misc
by translation＠torproject.org 15 Feb '19

15 Feb '19

commit e74382a7cc4da18bdced2b8007e60215f325f8bb Author: Translation commit bot <translation(a)torproject.org> Date: Fri Feb 15 06:16:16 2019 +0000 Update translations for tails-misc --- de.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/de.po b/de.po index 81b1ee456..4a982c947 100644 --- a/de.po +++ b/de.po @@ -37,8 +37,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2019-01-14 21:20+0100\n" -"PO-Revision-Date: 2019-01-19 14:25+0000\n" -"Last-Translator: Not AName <atzeje(a)web.de>\n" +"PO-Revision-Date: 2019-02-15 05:59+0000\n" +"Last-Translator: Thomas Oberndörfer <thomas(a)mailvelope.com>\n" "Language-Team: German (http://www.transifex.com/otf/torproject/language/de/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n"

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 15 Feb '19

15 Feb '19

commit e9170b830cee52f9d56feae2ef536f9c2010c749 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Feb 15 00:52:38 2019 +0000 Update translations for support-portal --- contents+pt-BR.po | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/contents+pt-BR.po b/contents+pt-BR.po index dfa3248d6..64e889f9d 100644 --- a/contents+pt-BR.po +++ b/contents+pt-BR.po @@ -3,8 +3,8 @@ # Eduardo Bonsi, 2019 # Emma Peel, 2019 # Alexei Gonçalves de Oliveira <alexis(a)gessicahellmann.com>, 2019 -# Eduardo Addad de Oliveira <eduardoaddad(a)hotmail.com>, 2019 # Chacal Exodius, 2019 +# Eduardo Addad de Oliveira <eduardoaddad(a)hotmail.com>, 2019 # msgid "" msgstr "" @@ -12,7 +12,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2019-01-28 19:24+CET\n" "PO-Revision-Date: 2018-10-02 22:41+0000\n" -"Last-Translator: Chacal Exodius, 2019\n" +"Last-Translator: Eduardo Addad de Oliveira <eduardoaddad(a)hotmail.com>, 2019\n" "Language-Team: Portuguese (Brazil) (https://www.transifex.com/otf/teams/1519/pt_BR/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -242,6 +242,7 @@ msgstr "### autoridade de ponte" #: (content/misc/glossary/contents+en.lrquestion.description) msgid "A special-purpose relay that maintains the list of [bridges](#bridge)." msgstr "" +"Um relé de finalidade especial que mantém a lista de [ponte](#bridge)." #: https//support.torproject.org/glossary/ #: (content/glossary/contents+en.lrquestion.description)

1 0

[meek/utls_3] Comment typo spotted by cohosh.
by dcf＠torproject.org 14 Feb '19

14 Feb '19

commit dd26d797b15b8a05262209e07846f7204420e81a Author: David Fifield <david(a)bamsoftware.com> Date: Thu Feb 14 11:04:34 2019 -0700 Comment typo spotted by cohosh. https://bugs.torproject.org/29077#comment:22 --- meek-client/utls.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meek-client/utls.go b/meek-client/utls.go index 171b28a..66b1a93 100644 --- a/meek-client/utls.go +++ b/meek-client/utls.go @@ -18,7 +18,7 @@ // on the wrapper, we initiate a uTLS connection (bootstrapConn), then peek at // the ALPN-negotiated protocol: if "h2", create an internal http2.Transport; // otherwise, create an internal http.Transport. In either case, set DialTLS on -// the created Transport do a function that dials using uTLS As a special case, +// the created Transport to a function that dials using uTLS. As a special case, // the first time the DialTLS callback is called, it reuses bootstrapConn (the // one made to peek at the ALPN), rather than make a new connection. //

1 0

[tor/master] Add test for crypto_fast_rng_get_double().
by dgoulet＠torproject.org 14 Feb '19

14 Feb '19

commit 3f28b98220a49730b8c58c45e42598ad2bada47b Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Feb 7 08:18:08 2019 -0500 Add test for crypto_fast_rng_get_double(). --- src/test/test_crypto_rng.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/test/test_crypto_rng.c b/src/test/test_crypto_rng.c index 0513d2a80..075c876b8 100644 --- a/src/test/test_crypto_rng.c +++ b/src/test/test_crypto_rng.c @@ -207,6 +207,10 @@ test_crypto_rng_fast(void *arg) uint64_t u64 = crypto_fast_rng_get_uint64(rng, UINT64_C(1)<<40); tt_u64_op(u64, OP_GE, 0); tt_u64_op(u64, OP_LT, UINT64_C(1)<<40); + + double d = crypto_fast_rng_get_double(rng); + tt_assert(d >= 0.0); + tt_assert(d < 1.0); } /* All values should have come up once. */

1 0

[tor/master] Add a test-rng program so we can pipe to dieharder.
by dgoulet＠torproject.org 14 Feb '19

14 Feb '19

commit acbde10fce5d688d70b5a4bfb3a736da838bb4cc Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Feb 6 09:36:12 2019 -0500 Add a test-rng program so we can pipe to dieharder. --- .gitignore | 2 ++ src/test/include.am | 11 ++++++++-- src/test/test_rng.c | 59 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 70 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 6a49285b8..a40cda02d 100644 --- a/.gitignore +++ b/.gitignore @@ -248,6 +248,7 @@ uptime-*.json /src/test/test-memwipe /src/test/test-ntor-cl /src/test/test-hs-ntor-cl +/src/test/test-rng /src/test/test-switch-id /src/test/test-timers /src/test/test_workqueue @@ -258,6 +259,7 @@ uptime-*.json /src/test/test-ntor-cl.exe /src/test/test-hs-ntor-cl.exe /src/test/test-memwipe.exe +/src/test/test-rng.exe /src/test/test-switch-id.exe /src/test/test-timers.exe /src/test/test_workqueue.exe diff --git a/src/test/include.am b/src/test/include.am index 1b8f7f5ad..8622fcbaa 100644 --- a/src/test/include.am +++ b/src/test/include.am @@ -68,7 +68,8 @@ noinst_PROGRAMS+= \ src/test/test-process \ src/test/test_workqueue \ src/test/test-switch-id \ - src/test/test-timers + src/test/test-timers \ + src/test/test-rng endif src_test_AM_CPPFLAGS = -DSHARE_DATADIR="\"$(datadir)\"" \ @@ -258,7 +259,13 @@ src_test_test_LDADD = \ src_test_test_slow_CPPFLAGS = $(src_test_test_CPPFLAGS) src_test_test_slow_CFLAGS = $(src_test_test_CFLAGS) src_test_test_slow_LDADD = $(src_test_test_LDADD) -src_test_test_slow_LDFLAGS = $(src_test_test_LDFLAGS) +src_test_test_slow_LDFLAGS =@TOR_LDFLAGS_openssl@ + +src_test_test_rng_CPPFLAGS = $(src_test_test_CPPFLAGS) +src_test_test_rng_CFLAGS = $(src_test_test_CFLAGS) +src_test_test_rng_SOURCES = src/test/test_rng.c +src_test_test_rng_LDFLAGS = $(src_test_test_LDFLAGS) +src_test_test_rng_LDADD = $(src_test_test_LDADD) src_test_test_memwipe_CPPFLAGS = $(src_test_test_CPPFLAGS) # Don't use bugtrap cflags here: memwipe tests require memory violations. diff --git a/src/test/test_rng.c b/src/test/test_rng.c new file mode 100644 index 000000000..c749de112 --- /dev/null +++ b/src/test/test_rng.c @@ -0,0 +1,59 @@ +/* Copyright (c) 2016-2019, The Tor Project, Inc. */ +/* See LICENSE for licensing information */ + +/* + * Example usage: + * + * ./src/test/test-rng --emit | dieharder -g 200 -a + * + * Remember, dieharder can tell you that your RNG is completely broken, but if + * your RNG is not _completely_ broken, dieharder cannot tell you whether your + * RNG is actually secure. + */ + +#include "orconfig.h" + +#ifdef HAVE_UNISTD_H +#include <unistd.h> +#endif +#include <stdio.h> +#include <string.h> +#include <errno.h> + +#include "lib/crypt_ops/crypto_rand.h" + +int +main(int argc, char **argv) +{ + uint8_t buf[0x123]; + + if (argc != 2 || strcmp(argv[1], "--emit")) { + fprintf(stderr, "If you want me to fill stdout with a bunch of random " + "bytes, you need to say --emit.\n"); + return 1; + } + + if (crypto_seed_rng() < 0) { + fprintf(stderr, "Can't seed RNG.\n"); + return 1; + } + +#if 0 + while (1) { + crypto_rand(buf, sizeof(buf)); + if (write(1 /*stdout*/, buf, sizeof(buf)) != sizeof(buf)) { + fprintf(stderr, "write() failed: %s\n", strerror(errno)); + return 1; + } + } +#endif + + crypto_fast_rng_t *rng = crypto_fast_rng_new(); + while (1) { + crypto_fast_rng_getbytes(rng, buf, sizeof(buf)); + if (write(1 /*stdout*/, buf, sizeof(buf)) != sizeof(buf)) { + fprintf(stderr, "write() failed: %s\n", strerror(errno)); + return 1; + } + } +}

1 0