summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGeorg Brandl <georg@python.org>2013-10-06 16:43:19 (GMT)
committerGeorg Brandl <georg@python.org>2013-10-06 16:43:19 (GMT)
commitc6a2c9b466325c1c35b24735db53d60598d66112 (patch)
treeb8da471aabbc83a5e564792674cdd20898294277
parent7d07833655a50e24a33a0a99ee2ffb289d4c2b04 (diff)
downloadcpython-c6a2c9b466325c1c35b24735db53d60598d66112.zip
cpython-c6a2c9b466325c1c35b24735db53d60598d66112.tar.gz
cpython-c6a2c9b466325c1c35b24735db53d60598d66112.tar.bz2
Closes #15213: update comment for _PyOS_URandom
-rw-r--r--Doc/library/os.rst5
-rw-r--r--Python/random.c5
2 files changed, 6 insertions, 4 deletions
diff --git a/Doc/library/os.rst b/Doc/library/os.rst
index ee378a6..9d4642c 100644
--- a/Doc/library/os.rst
+++ b/Doc/library/os.rst
@@ -3306,8 +3306,9 @@ Miscellaneous Functions
This function returns random bytes from an OS-specific randomness source. The
returned data should be unpredictable enough for cryptographic applications,
though its exact quality depends on the OS implementation. On a Unix-like
- system this will query /dev/urandom, and on Windows it will use CryptGenRandom.
- If a randomness source is not found, :exc:`NotImplementedError` will be raised.
+ system this will query ``/dev/urandom``, and on Windows it will use
+ ``CryptGenRandom()``. If a randomness source is not found,
+ :exc:`NotImplementedError` will be raised.
For an easy-to-use interface to the random number generator
provided by your platform, please see :class:`random.SystemRandom`.
diff --git a/Python/random.c b/Python/random.c
index e5caa82..337be86 100644
--- a/Python/random.c
+++ b/Python/random.c
@@ -224,8 +224,9 @@ lcg_urandom(unsigned int x0, unsigned char *buffer, size_t size)
}
}
-/* Fill buffer with size pseudo-random bytes, not suitable for cryptographic
- use, from the operating random number generator (RNG).
+/* Fill buffer with size pseudo-random bytes from the operating system random
+ number generator (RNG). It is suitable for for most cryptographic purposes
+ except long living private keys for asymmetric encryption.
Return 0 on success, raise an exception and return -1 on error. */
int