bzr-windows team mailing list archive

["Martin (gzlist)" <gzlist@xxxxxxxxxxxxxx>]

On 17/12/2009, John Arbash Meinel <john@xxxxxxxxxxxxxxxxx> wrote:
>
> Basically, paramiko uses PyCrypto's Randpool, which then tries to
> measure time.time()'s tick size by calling it until it changes 100 times.

Why patch PyCrypto when the new maintainer seems to want to get rid of
Randpool altogether? Wouldn't getting a change in paramiko to use
something else be better? It's not like fiddling with time.time is a
great method of getting randomness that should be prefered over native
functions.

Martin