[tor-bugs] #17815 [Tor]: [PATCH] eliminate modulo bias in OpenBSD's hardened malloc

[Tor Bug Tracker & Wiki]

#17815: [PATCH] eliminate modulo bias in OpenBSD's hardened malloc
--------------------+------------------------------------
 Reporter:  logan   |          Owner:
     Type:  defect  |         Status:  needs_revision
 Priority:  Medium  |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor     |        Version:
 Severity:  Normal  |     Resolution:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
  Sponsor:          |
--------------------+------------------------------------
Changes (by teor):

 * status:  new => needs_revision
 * type:  enhancement => defect
 * milestone:   => Tor: 0.2.8.x-final


Comment:

 Isn't the correct approach to do what Tor's crypto_rand_int() function
 does, and discard biased inputs until you get a result?

 That's the only way I know to ensure you don't get a biased result.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17815#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online