stronger randomness

diff --git a/TODO b/TODO
index 1a6cdcfb868b9f217ba132bbb33e33723fbc2647..c1154ca657e35d79b8a13bf9a6c41fe93d6ac22e 100644 (file)
--- a/TODO
+++ b/TODO
@@ -8,8 +8,6 @@
   - provide block-lib compatible API in gnunet_dht_service.h
   - eliminate continuations in DHT API (not needed, we have auto-retransmit!)
 * CORE:
-  - dynamic IVs [Nils]
-       - use QUALITY_NONCE
   - authentication of ciphertexts [Nils]
   - Jun 27 11:51:54 core-7670 ERROR Assertion failed at gnunet-service-core.c:3616.
     (transport notified us that we connected to ourselves!!!)

diff --git a/src/transport/gnunet-service-transport.c b/src/transport/gnunet-service-transport.c
index c117b06daa7b953c6b3aaf36526f062614ad7ecc..7ae560d715c2f332280b804eba6bbddde81da3c8 100644 (file)
--- a/src/transport/gnunet-service-transport.c
+++ b/src/transport/gnunet-service-transport.c
@@ -3244,7 +3244,7 @@ send_periodic_ping (void *cls,
     }
   va = GNUNET_malloc (sizeof (struct ValidationEntry) + peer_address->addrlen);
   va->transport_name = GNUNET_strdup (tp->short_name);
-  va->challenge = GNUNET_CRYPTO_random_u32 (GNUNET_CRYPTO_QUALITY_WEAK,
+  va->challenge = GNUNET_CRYPTO_random_u32 (GNUNET_CRYPTO_QUALITY_NONCE,
                                             UINT_MAX);
   va->send_time = GNUNET_TIME_absolute_get();
   va->session = peer_address->session;
@@ -3974,7 +3974,7 @@ run_validation (void *cls,
   va->chvc = chvc;
   chvc->ve_count++;
   va->transport_name = GNUNET_strdup (tname);
-  va->challenge = GNUNET_CRYPTO_random_u32 (GNUNET_CRYPTO_QUALITY_WEAK,
+  va->challenge = GNUNET_CRYPTO_random_u32 (GNUNET_CRYPTO_QUALITY_NONCE,
                                             UINT_MAX);
   va->send_time = GNUNET_TIME_absolute_get();
   va->addr = (const void*) &va[1];