From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Paul Eggert Newsgroups: gmane.emacs.bugs Subject: bug#58472: [PATCH] Make `message-unique-id' less prone to collisions Date: Mon, 17 Oct 2022 18:38:48 -0700 Organization: UCLA Computer Science Department Message-ID: <8fba11c5-c4b7-65ef-9b00-51799203d324@cs.ucla.edu> References: <871qr794o2.fsf@rfc20.org> <87ilki70p5.fsf@rfc20.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="------------7kVelmjAtb0vbPBNPj5KK7kT" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="21541"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.3.1 Cc: 58472@debbugs.gnu.org, Stefan Kangas To: Matt Armstrong Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue Oct 18 03:39:49 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1okba8-0005Nj-H6 for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 18 Oct 2022 03:39:48 +0200 Original-Received: from localhost ([::1]:57772 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1okba7-0005o4-3H for geb-bug-gnu-emacs@m.gmane-mx.org; Mon, 17 Oct 2022 21:39:47 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:46262) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1okbZP-0005no-03 for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 21:39:03 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:51511) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1okbZO-0007yD-ON for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 21:39:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1okbZO-0003jc-F6 for bug-gnu-emacs@gnu.org; Mon, 17 Oct 2022 21:39:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Paul Eggert Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 18 Oct 2022 01:39:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 58472 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 58472-submit@debbugs.gnu.org id=B58472.166605714114344 (code B ref 58472); Tue, 18 Oct 2022 01:39:02 +0000 Original-Received: (at 58472) by debbugs.gnu.org; 18 Oct 2022 01:39:01 +0000 Original-Received: from localhost ([127.0.0.1]:50587 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1okbZM-0003jH-V7 for submit@debbugs.gnu.org; Mon, 17 Oct 2022 21:39:01 -0400 Original-Received: from zimbra.cs.ucla.edu ([131.179.128.68]:43462) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1okbZJ-0003il-93 for 58472@debbugs.gnu.org; Mon, 17 Oct 2022 21:38:58 -0400 Original-Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 2602D16006F; Mon, 17 Oct 2022 18:38:50 -0700 (PDT) Original-Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id xqG1nIjPQKbA; Mon, 17 Oct 2022 18:38:49 -0700 (PDT) Original-Received: from localhost (localhost [127.0.0.1]) by zimbra.cs.ucla.edu (Postfix) with ESMTP id 04F1D160070; Mon, 17 Oct 2022 18:38:49 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.9.2 zimbra.cs.ucla.edu 04F1D160070 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.ucla.edu; s=78364E5A-2AF3-11ED-87FA-8298ECA2D365; t=1666057129; bh=jrN5R+WYasKvFYtlvVxyzxbnGwbpQzaGRUwL2bHjZG4=; h=Content-Type:Message-ID:Date:MIME-Version:Subject:To:From; b=HNsw2XUsCeVIQXarPsmMWTJ3+vYX1PXLzQXUX7HJoynllmXtALh1gx36KqgdZstZq lXsGwe9KLCWFv11aXM9Vc9A54vkEoPpEMfcJ/4+5KUumNkeqkUJI5umn/3hSZam1V6 wlixqce+3mRl8Dj5+53yg+vfF7uqUF2wxftYHL2I= X-Virus-Scanned: amavisd-new at zimbra.cs.ucla.edu Original-Received: from zimbra.cs.ucla.edu ([127.0.0.1]) by localhost (zimbra.cs.ucla.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lqnBd8OPxx09; Mon, 17 Oct 2022 18:38:48 -0700 (PDT) Original-Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200]) by zimbra.cs.ucla.edu (Postfix) with ESMTPSA id D8B4E16006F; Mon, 17 Oct 2022 18:38:48 -0700 (PDT) Content-Language: en-US In-Reply-To: <87ilki70p5.fsf@rfc20.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:245768 Archived-At: This is a multi-part message in MIME format. --------------7kVelmjAtb0vbPBNPj5KK7kT Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 10/17/22 11:40, Matt Armstrong wrote: > I like it. Eli doesn't, so I'll drop the idea for now. I didn't realize we were close to releasing 29.1, and I agree with Eli that adding a make-nonce primitive is not something to do close to a release. > With respect to "cryptographic purposes" how about mentioning that > `random' itself is potentially seeded from a cryptographically weak > source and makes no promise to use a PRNG suitable for cryptography? If > I'm right about those two assertions, I think they are important to > mention. Good point. This can be done in the documentation now: this doesn't hurt anything release-relevant, as it's simply documenting what we have. I installed the attached. --------------7kVelmjAtb0vbPBNPj5KK7kT Content-Type: text/x-patch; charset=UTF-8; name="0001-Improve-random-doc-re-nonces.patch" Content-Disposition: attachment; filename="0001-Improve-random-doc-re-nonces.patch" Content-Transfer-Encoding: base64 RnJvbSBmNDQ0MmQ0OWY2NDkwY2I3NTRiYWQ2NmRkMzRhMTgyZDVlYWUwNmQ5IE1vbiBTZXAg MTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQYXVsIEVnZ2VydCA8ZWdnZXJ0QGNzLnVjbGEuZWR1 PgpEYXRlOiBTdW4sIDE2IE9jdCAyMDIyIDIxOjM1OjQ3IC0wNzAwClN1YmplY3Q6IFtQQVRD SF0gPT9VVEYtOD9xP0ltcHJvdmU9MjA9RTI9ODA9OThyYW5kb209RTI9ODA9OTk9MjBkb2M9 MjByZT89CiA9P1VURi04P3E/PTIwbm9uY2VzPz0KTUlNRS1WZXJzaW9uOiAxLjAKQ29udGVu dC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFyc2V0PVVURi04CkNvbnRlbnQtVHJhbnNmZXItRW5j b2Rpbmc6IDhiaXQKCiogZG9jL2xpc3ByZWYvbnVtYmVycy50ZXhpIChSYW5kb20gTnVtYmVy cyk6IEltcHJvdmUgY292ZXJhZ2Ugb2YKcmFuZG9tIHNlZWQsIGVudHJvcHkgcG9vbHMsIGFu ZCB3aHkgb25lIHNob3VsZG7igJl0IHVzZSDigJhyYW5kb23igJkgZm9yCm5vbmNlcy4gIFNl ZSBCdWcjNTg0NzIuCi0tLQogZG9jL2xpc3ByZWYvbnVtYmVycy50ZXhpIHwgNDggKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKystLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQy IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvZG9jL2xpc3By ZWYvbnVtYmVycy50ZXhpIGIvZG9jL2xpc3ByZWYvbnVtYmVycy50ZXhpCmluZGV4IGZkY2Rh MzI4ZDguLjJjN2ExZDMyNjYgMTAwNjQ0Ci0tLSBhL2RvYy9saXNwcmVmL251bWJlcnMudGV4 aQorKysgYi9kb2MvbGlzcHJlZi9udW1iZXJzLnRleGkKQEAgLTEyMzgsNiArMTIzOCw5IEBA IFJhbmRvbSBOdW1iZXJzCiBzZXF1ZW5jZSBvZiBudW1iZXJzLiAgQnkgZGVmYXVsdCwgRW1h Y3MgaW5pdGlhbGl6ZXMgdGhlIHJhbmRvbSBzZWVkIGF0CiBzdGFydHVwLCBpbiBzdWNoIGEg d2F5IHRoYXQgdGhlIHNlcXVlbmNlIG9mIHZhbHVlcyBvZiBAY29kZXtyYW5kb219CiAod2l0 aCBvdmVyd2hlbG1pbmcgbGlrZWxpaG9vZCkgZGlmZmVycyBpbiBlYWNoIEVtYWNzIHJ1bi4K K1RoZSByYW5kb20gc2VlZCBpcyB0eXBpY2FsbHkgaW5pdGlhbGl6ZWQgZnJvbSBzeXN0ZW0g ZW50cm9weTsKK2hvd2V2ZXIsIG9uIG9ic29sZXNjZW50IHBsYXRmb3JtcyBsYWNraW5nIGVu dHJvcHkgcG9vbHMsCit0aGUgc2VlZCBpcyB0YWtlbiBmcm9tIGxlc3MtcmFuZG9tIHZvbGF0 aWxlIGRhdGEgc3VjaCBhcyB0aGUgY3VycmVudCB0aW1lLgogCiAgIFNvbWV0aW1lcyB5b3Ug d2FudCB0aGUgcmFuZG9tIG51bWJlciBzZXF1ZW5jZSB0byBiZSByZXBlYXRhYmxlLiAgRm9y CiBleGFtcGxlLCB3aGVuIGRlYnVnZ2luZyBhIHByb2dyYW0gd2hvc2UgYmVoYXZpb3IgZGVw ZW5kcyBvbiB0aGUgcmFuZG9tCkBAIC0xMjU2LDEyICsxMjU5LDQ1IEBAIFJhbmRvbSBOdW1i ZXJzCiBhbnkgZml4bnVtLCBpLmUuLCBhbnkgaW50ZWdlciBmcm9tIEBjb2Rle21vc3QtbmVn YXRpdmUtZml4bnVtfSB0aHJvdWdoCiBAY29kZXttb3N0LXBvc2l0aXZlLWZpeG51bX0gKEBw eHJlZntJbnRlZ2VyIEJhc2ljc30pLgogCi1JZiBAdmFye2xpbWl0fSBpcyBAY29kZXt0fSwg aXQgbWVhbnMgdG8gY2hvb3NlIGEgbmV3IHNlZWQgYXMgaWYgRW1hY3MKLXdlcmUgcmVzdGFy dGluZywgdHlwaWNhbGx5IGZyb20gdGhlIHN5c3RlbSBlbnRyb3B5LiAgT24gc3lzdGVtcwot bGFja2luZyBlbnRyb3B5IHBvb2xzLCBjaG9vc2UgdGhlIHNlZWQgZnJvbSBsZXNzLXJhbmRv bSB2b2xhdGlsZSBkYXRhCi1zdWNoIGFzIHRoZSBjdXJyZW50IHRpbWUuCi0KIElmIEB2YXJ7 bGltaXR9IGlzIGEgc3RyaW5nLCBpdCBtZWFucyB0byBjaG9vc2UgYSBuZXcgc2VlZCBiYXNl ZCBvbiB0aGUKLXN0cmluZydzIGNvbnRlbnRzLgorc3RyaW5nJ3MgY29udGVudHMuICBUaGlz IGNhdXNlcyBsYXRlciBjYWxscyB0byBAY29kZXtyYW5kb219IHRvIHJldHVybgorYSByZXBy b2R1Y2libGUgc2VxdWVuY2Ugb2YgcmVzdWx0cy4KKworSWYgQHZhcntsaW1pdH0gaXMgQGNv ZGV7dH0sIGl0IG1lYW5zIHRvIGNob29zZSBhIG5ldyBzZWVkIGFzIGlmIEVtYWNzCit3ZXJl IHJlc3RhcnRpbmcuICBUaGlzIGNhdXNlcyBsYXRlciBjYWxscyB0byBAY29kZXtyYW5kb219 IHRvIHJldHVybgorYW4gdW5wcmVkaWN0YWJsZSBzZXF1ZW5jZSBvZiByZXN1bHRzLgogCiBA ZW5kIGRlZnVuCisKK0lmIHlvdSBuZWVkIGEgcmFuZG9tIG5vbmNlIGZvciBjcnlwdG9ncmFw aGljIHB1cnBvc2VzLCB1c2luZworQGNvZGV7cmFuZG9tfSBpcyB0eXBpY2FsbHkgbm90IHRo ZSBiZXN0IGFwcHJvYWNoLCBmb3Igc2V2ZXJhbCByZWFzb25zOgorCitAaXRlbWl6ZSBAYnVs bGV0CitAaXRlbQorQWx0aG91Z2ggeW91IGNhbiB1c2UgQGNvZGV7KHJhbmRvbSB0KX0gdG8g Y29uc3VsdCBzeXN0ZW0gZW50cm9weSwKK2RvaW5nIHNvIGNhbiBhZHZlcnNlbHkgYWZmZWN0 IG90aGVyIHBhcnRzIG9mIHlvdXIgcHJvZ3JhbSB0aGF0IGJlbmVmaXQKK2Zyb20gcmVwcm9k dWNpYmxlIHJlc3VsdHMuCisKK0BpdGVtCitUaGUgc3lzdGVtLWRlcGVuZGVudCBwc2V1ZG8t cmFuZG9tIG51bWJlciBnZW5lcmF0b3IgKFBSTkcpIHVzZWQgYnkKK0Bjb2Rle3JhbmRvbX0g aXMgbm90IG5lY2Vzc2FyaWx5IHN1aXRhYmxlIGZvciBjcnlwdG9ncmFwaHkuCisKK0BpdGVt CitBIGNhbGwgdG8gQGNvZGV7KHJhbmRvbSB0KX0gZG9lcyBub3QgZ2l2ZSBkaXJlY3QgYWNj ZXNzIHRvIHN5c3RlbQorZW50cm9weTsgdGhlIGVudHJvcHkgaXMgcGFzc2VkIHRocm91Z2gg dGhlIHN5c3RlbS1kZXBlbmRlbnQgUFJORywgdGh1cworcG9zc2libHkgYmlhc2luZyB0aGUg cmVzdWx0cy4KKworQGl0ZW0KK09uIHR5cGljYWwgcGxhdGZvcm1zIHRoZSByYW5kb20gc2Vl ZCBjb250YWlucyBvbmx5IDMyIGJpdHMsIHdoaWNoIGlzCit0eXBpY2FsbHkgbmFycm93ZXIg dGhhbiBhbiBFbWFjcyBmaXhudW0sIGFuZCBpcyBub3QgbmVhcmx5IGVub3VnaCBmb3IKK2Ny eXB0b2dyYXBoaWMgcHVycG9zZXMuCisKK0BpdGVtCitBIEBjb2RleyhyYW5kb20gdCl9IGNh bGwgbGVhdmVzIGluZm9ybWF0aW9uIGFib3V0IHRoZSBub25jZSBzY2F0dGVyZWQKK2Fib3V0 IEVtYWNzJ3MgaW50ZXJuYWwgc3RhdGUsIGluY3JlYXNpbmcgdGhlIHNpemUgb2YgdGhlIGlu dGVybmFsCithdHRhY2sgc3VyZmFjZS4KKworQGl0ZW0KK09uIG9ic29sZXNjZW50IHBsYXRm b3JtcyBsYWNraW5nIGVudHJvcHkgcG9vbHMsIEBjb2RleyhyYW5kb20gdCl9IGlzCitzZWVk ZWQgZnJvbSBhIGNyeXB0b2dyYXBoaWNhbGx5IHdlYWsgc291cmNlLgorQGVuZCBpdGVtaXpl Ci0tIAoyLjM3LjMKCg== --------------7kVelmjAtb0vbPBNPj5KK7kT--