torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Always hash crypto_strongest_rand() along with some prng

Browse Source 
(before using it for anything besides feeding the PRNG)

Part of #17694
This commit is contained in:
Nick Mathewson
2015-12-08 10:54:42 -05:00
parent 943369f927
commit 2259de0de7
7 changed files with 58 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug17694_strongest
+6
View File
@@ -0,0 +1,6 @@
o Minor features (security):
- Never use the system entropy output directly for anything besides
seeding the PRNG. When we want to generate important keys, instead
of using system entropy directly, hash it with the PRNG stream.
This may help resist certain attacks based on broken OS entropy
implementations. Closes part of ticket 17694.