FreeBSD random number generator broken for last 4 months
FreeBSD random number generator broken for last 4 months
Posted Feb 18, 2015 18:17 UTC (Wed) by cesarb (subscriber, #6266)Parent article: FreeBSD random number generator broken for last 4 months
As a reminder: with DSA, keys not only generated, but merely *used* on a system with a broken RNG are compromised. (This does not apply to deterministic DSA or EdDSA.)
So if for instance the system had a ssh ECDSA key generated with a non-broken RNG, but used with a broken RNG, it should be discarded and regenerated (unless openssh used deterministic ECDSA).
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.
