From: Donald G P. <dg...@ni...> - 2006-01-17 21:20:02
|
> I think the usual solution is to create a temporary > name with lots of high-quality randomness. 100 bits > or more of randomness or more. We don't have the primitives to go that route. Certainly [expr rand()] is not up to that task. I really think it's better to follow the strategy proposed in the TIP. The [file tempfile] command would [open] the file itself (with the CREAT and EXCL flags of course), then you know you won't face any race conditions with other malicious code. | Don Porter Mathematical and Computational Sciences Division | | don...@ni... Information Technology Laboratory | | http://math.nist.gov/~DPorter/ NIST | |______________________________________________________________________| |