[src/trunk]: src/lib/libc/gen Tweak wording, define `output', remove misplace...

[riastradh <riastradh%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/469a1fbdec50
branches:  trunk
changeset: 333826:469a1fbdec50
user:      riastradh <riastradh%NetBSD.org@localhost>
date:      Mon Nov 17 18:41:29 2014 +0000

description:
Tweak wording, define `output', remove misplaced scaremongering.

diffstat:

 lib/libc/gen/arc4random.3 |  18 +++++++++++-------
 1 files changed, 11 insertions(+), 7 deletions(-)

diffs (43 lines):

diff -r cc40bd40b1d8 -r 469a1fbdec50 lib/libc/gen/arc4random.3
--- a/lib/libc/gen/arc4random.3 Mon Nov 17 17:11:29 2014 +0000
+++ b/lib/libc/gen/arc4random.3 Mon Nov 17 18:41:29 2014 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: arc4random.3,v 1.18 2014/11/17 15:28:22 riastradh Exp $
+.\"    $NetBSD: arc4random.3,v 1.19 2014/11/17 18:41:29 riastradh Exp $
 .\"
 .\" Copyright (c) 2014 The NetBSD Foundation, Inc.
 .\" All rights reserved.
@@ -110,9 +110,9 @@
 The
 .Nm
 functions provide the following security properties against three
-different classes of attackers, assuming that the state of the
-operating system's entropy pool is unknown to the attacker:
-.Bl -bullet -offset abcd -compact
+different classes of attackers, assuming enough entropy is provided by
+the operating system:
+.Bl -bullet -offset abcd
 .It
 An attacker who has seen some outputs of any of the
 .Nm
@@ -125,6 +125,12 @@
 or future outputs in other processes, particularly its parent or
 siblings.
 .El
+.Pp
+One
+.Sq output
+means the result of any single request to an
+.Nm
+function, no matter how short it is.
 .Sh IMPLEMENTATION NOTES
 The
 .Nm
@@ -308,6 +314,4 @@
 surprises on different operating systems.
 This should not be done lightly, though, because there are already too
 many different choices, and too many opportunities for programmers to
-reach for one and pick the wrong one, leading to money being stolen
-and people being killed if they err on the side of faster code with a
-weaker security model.
+reach for one and pick the wrong one.