---
- branch: MAIN
  date: Wed Jan 21 02:47:39 UTC 2015
  files:
  - new: '1.28'
    old: '1.27'
    path: src/lib/libc/gen/arc4random.c
    pathrev: src/lib/libc/gen/arc4random.c@1.28
    type: modified
  id: 20150121T024739Z.3fce83a27743b181a0ab552ea73eaa4fd941d821
  log: |
    Use ChaCha20 here as advertised, not ChaCha8.

    Oops.

    Fortunately, there is no public cryptanalysis even of ChaCha8: the
    best published attack is on ChaCha7 with time complexity 2^248.
  module: src
  subject: 'CVS commit: src/lib/libc/gen'
  unixtime: '1421808459'
  user: riastradh