Patch Pycrypto for standalone installers?

Martin (gzlist) gzlist at googlemail.com
Fri Dec 18 00:37:05 GMT 2009


On 17/12/2009, John Arbash Meinel <john at arbash-meinel.com> wrote:
>
> Basically, paramiko uses PyCrypto's Randpool, which then tries to
> measure time.time()'s tick size by calling it until it changes 100 times.

Why patch PyCrypto when the new maintainer seems to want to get rid of
Randpool altogether? Wouldn't getting a change in paramiko to use
something else be better? It's not like fiddling with time.time is a
great method of getting randomness that should be prefered over native
functions.

Martin



More information about the bazaar mailing list