AFAIK, Havege uses TSC drift as a random source of entropy, but recent
CPUs now have an accurate TSC, so havege hasn't been generating random
numbers for a while now. This is also an issue in certain virtualized
environments.

PolarSSL had to switch away from using Havege as the basis of their RNG because 
of this issue:
http://polarssl.org/trac/wiki/SecurityAdvisory201102

NACK for the MIR.

** Changed in: haveged (Ubuntu)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1031104

Title:
  [MIR] haveged

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/haveged/+bug/1031104/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to