GnuPG PRNG insecure?
    Werner Koch 
    wk at gnupg.org
       
    Fri Feb  8 08:33:01 CET 2002
    
    
  
On Thu, 7 Feb 2002 20:06:03 +0100, Stefan Keller said:
> The problem I see with this is, that previous data in our random
> pool is simply overwritten with new data. If our gathered data is
Thanks Stefan for pointing this out.  As Peter already mentioned, this
is not a serious flaw because an attacker is not able to mix data of
his choice in.  I fixed it of course.
  Werner
-- 
Werner Koch        Omnis enim res, quae dando non deficit, dum habetur
g10 Code GmbH      et non datur, nondum habetur, quomodo habenda est.
Privacy Solutions                                        -- Augustinus
    
    
More information about the Gnupg-devel
mailing list