Timeline for How can a poor RNG impact security?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 26, 2016 at 19:08 | vote | accept | exilit | ||
| May 25, 2016 at 2:48 | comment | added | Matt Nordhoff | @immibis Removing that line of code was harmless. The problem was they also removed a separate, but identical line of code, unaware it was critically important. | |
| May 25, 2016 at 2:41 | comment | added | Criticizing Israel not allowed | @MattNordhoff If I'm understanding correctly, the harm came from removing the code that used uninitialized data as randomness. That implies the system was relying on that uninitialized data for randomness. Otherwise, removing it wouldn't break things. | |
| May 25, 2016 at 2:37 | comment | added | Matt Nordhoff | @immibis They weren't relying on it. They thought it was a cute idea — at best, it would add some entropy; at worst, it would add nothing. Harmless. The harm came when the code was changed again, inadvertently breaking everything. | |
| May 25, 2016 at 0:14 | comment | added | Criticizing Israel not allowed | They were relying on uninitialized data for security? They don't know how much entropy that had, and it could be zero. | |
| May 24, 2016 at 20:03 | history | answered | Thomas Pornin | CC BY-SA 3.0 |