Re: openssl-blacklist & two keys per one pid

2008-05-21 Thread Bodo Moeller
On Wed, May 21, 2008 at 2:46 PM, Dirk-Willem van Gulik <[EMAIL PROTECTED]> wrote: > On May 21, 2008, at 12:06 PM, Bodo Moeller wrote: >> A more elaborate explanation seems in place to make sure that >> we avoid uninentionally incomplete blacklists. >> I'd exp

Re: openssl-blacklist & two keys per one pid

2008-05-21 Thread Bodo Moeller
On Mon, May 19, 2008 at 02:17:42PM +0200, Florian Weimer wrote: > * Kees Cook: >>> The rule is simple. When the ~/.rnd file doesn't exist I get one key and >>> in other situation I get another (that listed in Ubuntu >>> openssl-blacklist) key. Because of this problem openssl-blacklist has to

Re: Thanks to Debian OpenSSL developers

2008-05-16 Thread Bodo Moeller
On Thu, May 15, 2008 at 11:38:59PM +0200, Steffen Schulz <[EMAIL PROTECTED]> wrote: > - There are published algorithms for good PRNGs, no need to help > yourself with adding unintialized memory and praying the OS does a > good job already. Nothing in OpenSSL has ever *relied* on uninitialize