Re: Debian libssl security (OpenSSH safe?)

[raven]

Ted Unangst ha scritto:
On 5/14/08, Gabriel Linder <[EMAIL PROTECTED]> wrote:
  
Just wondering... If someone generates ssh keys with flags J or Z
 set in malloc.conf(5), aren't these keys useless too (since feeding
 predictable data is more or less equal to not feeding data at all) ?
    
A decent analysis can be found here... just to understand what can do a 
comment /* */  :)
http://blog.drinsama.de/erich/en/linux/2008051401-consequences-of-sslssh-weakness.html

francesco