Debian OpenSSL Predictable PRNG Toys - The Diigo Meta page

• 23 Sep 09
  

  robert daly
• 25 May 08
  

  Mamoud Kassem

  debian openssl openssh security cryptography ubuntu

• 19 May 08
  

  Matt Vance
• 18 May 08
  

  Jack Baty

  linux security ssh

• 16 May 08
  

  Alberto Fernandez

  administration article comics crypto debian development encryption openssh security

• 

  rampion

  All SSL and SSH keys generated on Debian-based systems (Ubuntu, Kubuntu, etc) between September 2006 and May 13th, 2008 may be affected. In the case of SSL keys, all generated certificates will be need to recreated.

  debian ubuntu ssl ssh openssl bug linux

• 15 May 08
  

  F M

  cool debian keys download

  • These lines were removed because they caused the Valgrind and Purify tools to produce warnings about the use of uninitialized data in any code that was linked to OpenSSL. You can see one such report to the OpenSSL team here. Removing this code has the side effect of crippling the seeding process for the OpenSSL PRNG. Instead of mixing in random data for the initial seed, the only "random" value that was used was the current process ID. On the Linux platform, the default maximum process ID is 32,768, resulting in a very small number of seed values being used for all PRNG operations.
• 

  craig hancock

  security debian openssl linux openssh crypto cryptography explanation hack hacking scripts Software ssl ssh tools ubuntu delicious

Would you like to comment?

Join Diigo for a free account, or sign in if you are already a member.