On Wed, May 21, 2008 at 2:46 PM, Dirk-Willem van Gulik
<[EMAIL PROTECTED]> wrote:
> On May 21, 2008, at 12:06 PM, Bodo Moeller wrote:
>> A more elaborate explanation seems in place to make sure that
>> we avoid uninentionally incomplete blacklists.
>> I'd exp
On Mon, May 19, 2008 at 02:17:42PM +0200, Florian Weimer wrote:
> * Kees Cook:
>>> The rule is simple. When the ~/.rnd file doesn't exist I get one key and
>>> in other situation I get another (that listed in Ubuntu
>>> openssl-blacklist) key. Because of this problem openssl-blacklist has to
On Thu, May 15, 2008 at 11:38:59PM +0200, Steffen Schulz <[EMAIL PROTECTED]>
wrote:
> - There are published algorithms for good PRNGs, no need to help
> yourself with adding unintialized memory and praying the OS does a
> good job already.
Nothing in OpenSSL has ever *relied* on uninitialize
3 matches
Mail list logo