arc4: drop 4096 bytes of the early keystream (#1586)

It might be safer to drop 4096 bytes to be on the safe side.

See: twitter.com/nugxperience/status/1773906926503591970
This commit is contained in:
Loganaden Velvindron 2024-10-27 20:30:44 +04:00 committed by GitHub
parent ba0442bacc
commit afb7f48344
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -374,9 +374,9 @@ arc4_stir(void)
* belief that "words" in the Fluhrer/Mantin/Shamir paper refers
* to processor words.
*
* We add another sect to the cargo cult, and choose 12*256.
* We add another sect to the cargo cult, and choose 16*256.
*/
for (i = 0; i < 12*256; i++)
for (i = 0; i < 16*256; i++)
(void)arc4_getbyte();
rekey_fuzz = arc4_getword();