Point to Peter Gutmann's revised paper.

The copy at www.usenix.org is the old version.

diff --git a/crypto/rand/rand_win.c b/crypto/rand/rand_win.c
index 7d61bce35ee0ddccdabeaeac207d5bc10b37d625..82955d8d30d9d016c6723ee23b35e9500c79bbd8 100644 (file)
--- a/crypto/rand/rand_win.c
+++ b/crypto/rand/rand_win.c
@@ -264,6 +264,7 @@ int RAND_poll(void)
         * This seeding method was proposed in Peter Gutmann, Software
         * Generation of Practically Strong Random Numbers,
         * http://www.usenix.org/publications/library/proceedings/sec98/gutmann.html
+     * revised version at http://www.cryptoengines.com/~peter/06_random.pdf
         * (The assignment of entropy estimates below is arbitrary, but based
         * on Peter's analysis the full poll appears to be safe. Additional
         * interactive seeding is encouraged.)