LWN.net Logo

Impact of the Debian OpenSSL vulnerability

Impact of the Debian OpenSSL vulnerability

Posted May 16, 2008 21:15 UTC (Fri) by rfunk (subscriber, #4054)
In reply to: Impact of the Debian OpenSSL vulnerability by socket
Parent article: Impact of the Debian OpenSSL vulnerability

OpenSSL supports systems that don't have /dev/random, but provides the 
same API to everyone.  So when /dev/random is available, it's used as a 
seed for OpenSSL's pseudo-random number generator, rather than being used 
directly.  If they used /dev/random directly they'd need totally separate 
code paths depending on whether it was available.

I wonder how the OpenBSD folks handle it.....


(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds