* "random PID" - worth to be considered (again) ?
@ 2012-07-09 13:53 Toralf Förster
2012-07-09 16:17 ` Ted Ts'o
0 siblings, 1 reply; 2+ messages in thread
From: Toralf Förster @ 2012-07-09 13:53 UTC (permalink / raw)
To: Theodore Ts'o; +Cc: Linux Kernel
After reading [1] I'm wondering whether these would at least improve
OpenSSL's implementation of a RSA key generator (page 13 in [1]) ?
/me knows about the security-by-obscurity discussion like in [2],
however here I do not speak about guessing next PID, but about the
described entropy hole.
[1] https://factorable.net/weakkeys12.extended.pdf
[2] http://marc.info/?t=94754302700001&r=1&w=2
--
MfG/Sincerely
Toralf Förster
pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: "random PID" - worth to be considered (again) ?
2012-07-09 13:53 "random PID" - worth to be considered (again) ? Toralf Förster
@ 2012-07-09 16:17 ` Ted Ts'o
0 siblings, 0 replies; 2+ messages in thread
From: Ted Ts'o @ 2012-07-09 16:17 UTC (permalink / raw)
To: Toralf Förster; +Cc: Linux Kernel
On Mon, Jul 09, 2012 at 03:53:14PM +0200, Toralf Förster wrote:
> After reading [1] I'm wondering whether these would at least improve
> OpenSSL's implementation of a RSA key generator (page 13 in [1]) ?
Random PID's is a terribly way to get entropy into OpenSSL. You don't
get that many bits of entropy that way, and what bits of randomness
you get is coming from /dev/urandom. So improving the randomness of
/dev/urandom is what's important.
Regards,
- Ted
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-07-09 16:17 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-07-09 13:53 "random PID" - worth to be considered (again) ? Toralf Förster
2012-07-09 16:17 ` Ted Ts'o
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.