"random PID" - worth to be considered (again) ?

All of lore.kernel.org
 help / color / mirror / Atom feed

* "random PID" - worth to be considered (again)  ?
@ 2012-07-09 13:53 Toralf Förster
  2012-07-09 16:17 ` Ted Ts'o
  0 siblings, 1 reply; 2+ messages in thread
From: Toralf Förster @ 2012-07-09 13:53 UTC (permalink / raw)
  To: Theodore Ts'o; +Cc: Linux Kernel

After reading [1] I'm wondering whether these would at least improve
OpenSSL's implementation of a RSA key generator (page 13 in [1]) ?

/me knows about the security-by-obscurity discussion like in [2],
however here I do not speak about guessing next PID, but about the
described entropy hole.

[1] https://factorable.net/weakkeys12.extended.pdf
[2] http://marc.info/?t=94754302700001&r=1&w=2

-- 
MfG/Sincerely
Toralf Förster
pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: "random PID" - worth to be considered (again)  ?
  2012-07-09 13:53 "random PID" - worth to be considered (again) ? Toralf Förster
@ 2012-07-09 16:17 ` Ted Ts'o
  0 siblings, 0 replies; 2+ messages in thread
From: Ted Ts'o @ 2012-07-09 16:17 UTC (permalink / raw)
  To: Toralf Förster; +Cc: Linux Kernel

On Mon, Jul 09, 2012 at 03:53:14PM +0200, Toralf Förster wrote:
> After reading [1] I'm wondering whether these would at least improve
> OpenSSL's implementation of a RSA key generator (page 13 in [1]) ?

Random PID's is a terribly way to get entropy into OpenSSL.  You don't
get that many bits of entropy that way, and what bits of randomness
you get is coming from /dev/urandom.  So improving the randomness of
/dev/urandom is what's important.

Regards,

					- Ted

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2012-07-09 16:17 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-07-09 13:53 "random PID" - worth to be considered (again) ? Toralf Förster
2012-07-09 16:17 ` Ted Ts'o

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.