|
|
Log in / Subscribe / Register

FreeBSD random number generator broken for last 4 months

FreeBSD random number generator broken for last 4 months

Posted Feb 18, 2015 18:17 UTC (Wed) by cesarb (subscriber, #6266)
Parent article: FreeBSD random number generator broken for last 4 months

As a reminder: with DSA, keys not only generated, but merely *used* on a system with a broken RNG are compromised. (This does not apply to deterministic DSA or EdDSA.)

So if for instance the system had a ssh ECDSA key generated with a non-broken RNG, but used with a broken RNG, it should be discarded and regenerated (unless openssh used deterministic ECDSA).


The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds