|
@@ -1258,14 +1258,14 @@ end
|
|
</para>
|
|
</para>
|
|
<itemizedlist>
|
|
<itemizedlist>
|
|
<listitem><para>krand - use internal kam_rand() function</para></listitem>
|
|
<listitem><para>krand - use internal kam_rand() function</para></listitem>
|
|
- <listitem><para>fastrand - use internal fastrand function</para></listitem>
|
|
|
|
- <listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem>
|
|
|
|
|
|
+ <listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem>
|
|
|
|
+ <listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem>
|
|
<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
|
|
<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
|
|
</itemizedlist>
|
|
</itemizedlist>
|
|
<para>
|
|
<para>
|
|
Note: the krand and fastrand engines are not recommended for use on
|
|
Note: the krand and fastrand engines are not recommended for use on
|
|
systems requiring strong security, as they may not generate numbers
|
|
systems requiring strong security, as they may not generate numbers
|
|
- with enough randomness.
|
|
|
|
|
|
+ with enough randomness and are not cryptographically secure.
|
|
</para>
|
|
</para>
|
|
<para>
|
|
<para>
|
|
The default value is empty (not set) for libssl v1.0.x or older, and
|
|
The default value is empty (not set) for libssl v1.0.x or older, and
|