[Info-vax] $GETTIM and $GETTIM_PREC on modern systems

[Arne Vajhøj]

On 7/7/2022 9:36 PM, Mark Daniel wrote:
> On 8/7/22 10:09 am, Stephen Hoffman wrote:
>> Also pointed out the naming was wrong; that the new API was offering 
>> better accurancy, while both old and new API offered the same precision.

> Fell back to the WASD OpenSSL build which explicitly uses $GETTIM to 
> allow V8.4, V8.3, and presumably further back.  Would be nice if WASD no 
> longer needed its own OpenSSL to keep current.
> 
> Then I started tinkering with dynamically loading SYS$GETTIM_PREC and if 
> unavailable falling back to SYS$GETTIM.  Tested working for V8.4 and 
> V8.3 and submitted the change via an OpenSSL bug report.
> 
> https://github.com/openssl/openssl/issues/18727
> 
> OpenSSL used the concept with their own code which tested OK across V8.4 
> and V8.3.
> 
> Now the need at all for SYS$GETTIM_PREC is now being questioned.  If 
> eliminated the V8.4 dependency goes with it.
> 
> https://github.com/openssl/openssl/pull/18730

> Hence the question of VSI.
> 
>> VSI had been discussing entropy a while back, but how much of that 
>> made it into the release? The entropy engine was listed, but I've not 
>> poked at it.  Entropy discussion, from a few years ago:
> 
> OpenSSL are prepping for it.  From...
> 
>> https://raw.githubusercontent.com/levitte/openssl/fix-18727-111/crypto/rand/rand_vms.c 
> 
> Look for...
> 
> /*
>   * SYS$GET_ENTROPY METHOD
>   * ======================
>   *
>   * This is a high entropy method based on a new system service that is
>   * based on getentropy() from FreeBSD 12.  It's only used if available,
>   * and its availability is detected at run-time.
>   *
>   * We assume that this function provides full entropy random output.
>   */

I am not sure that I get it.

SSL needs a large number of random bits.

Even if $GETTIM_PREC gave a few more bits than $GETTIM, then
I don't see that as a big thing - and not worth any
version ifdef's.

Arne

PS: I dabbled a little bit in the random bytes topic last year and the
     result is here https://www.vajhoej.dk/arne/opensource/extran/