Jason A. Donenfeld <Jason@xxxxxxxxx> wrote: > Either way, I don't think this is safe to do. We want the feed forward > there to totally separate generations of seeds. Yes, but the right way to do that is to lock the chacha context in the reseed function and call extract_buf() while that lock is held. I'll send a patch for that soon.
