from r...@sixdemonbag.org...:

The CSPRNG is almost certainly broken.

Thank you!

When generating the key-pair with Re: pgp263iamulti06, the
"randomness" is obtained by user's keyboard input. Is it
then that the above applies only when the session key is
generated?

PGP 2.6.3 was a DOS program,...

And Linux. (Apple too - remember compiling it on Mac when
the command-line build tools were still available). So is
the same (i.e., a problematic source of randomness when
generating the session key) likely to be the case
compiling/running 2.6.3iamulti06 under Linux today?

PetRoh


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to