Random - Revision history

Pbug: /* Randomness matters */

2008-05-24T08:55:05Z

Randomness matters

← Older revision		Revision as of 01:55, 24 May 2008
Line 5:		Line 5:
	Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.		Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.

	== ~~Randomness~~ matters ==		== Good randomness matters ==

	In mid-may of 2008 a vulnerability was detected in Debian Linux. The developers at debian switched off a "random stirring" of random data, causing the seed of the randomness to be only a [[pid]] number which in debians case is 65535 possible seeds. Knowing that someone created an SSH key for example in the first 10,000 pids reduces the actual number of keys that can be generated significantly. Debian did this because it turned off a warning in some linting but acknowledged they were wrong in this and have advised everyone to upgrade their systems and redo their [[ssh]] keygens.		In mid-may of 2008 a vulnerability was detected in Debian Linux. The developers at debian switched off a "random stirring" of random data, causing the seed of the randomness to be only a [[pid]] number which in debians case is 65535 possible seeds. Knowing that someone created an SSH key for example in the first 10,000 pids reduces the actual number of keys that can be generated significantly. Debian did this because it turned off a warning in some linting but acknowledged they were wrong in this and have advised everyone to upgrade their systems and redo their [[ssh]] keygens.

Pbug: /* Entropy sources */

2008-05-23T18:59:24Z

Entropy sources

← Older revision		Revision as of 11:59, 23 May 2008
Line 1:		Line 1:
	Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to a system compromise.		Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to a system compromise.

	=== Entropy sources ===		== Entropy sources ==

	Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.		Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.


	== Randomness matters ==		== Randomness matters ==

	In mid-may of 2008 a vulnerability was detected in Debian Linux. The developers at debian switched off a "random stirring" of random data, causing the seed of the randomness to be only a [[pid]] number which in debians case is 65535 possible seeds. Knowing that someone created an SSH key for example in the first 10,000 pids reduces the actual number of keys that can be generated significantly. Debian did this because it turned off a warning in some linting but acknowledged they were wrong in this and have advised everyone to upgrade their systems and redo their [[ssh]] keygens.		In mid-may of 2008 a vulnerability was detected in Debian Linux. The developers at debian switched off a "random stirring" of random data, causing the seed of the randomness to be only a [[pid]] number which in debians case is 65535 possible seeds. Knowing that someone created an SSH key for example in the first 10,000 pids reduces the actual number of keys that can be generated significantly. Debian did this because it turned off a warning in some linting but acknowledged they were wrong in this and have advised everyone to upgrade their systems and redo their [[ssh]] keygens.

Pbug: debian incident

2008-05-23T18:58:43Z

debian incident

← Older revision		Revision as of 11:58, 23 May 2008
Line 4:		Line 4:

	Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.		Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.


			== Randomness matters ==

			In mid-may of 2008 a vulnerability was detected in Debian Linux. The developers at debian switched off a "random stirring" of random data, causing the seed of the randomness to be only a [[pid]] number which in debians case is 65535 possible seeds. Knowing that someone created an SSH key for example in the first 10,000 pids reduces the actual number of keys that can be generated significantly. Debian did this because it turned off a warning in some linting but acknowledged they were wrong in this and have advised everyone to upgrade their systems and redo their [[ssh]] keygens.

Sysadmin at 17:07, 10 October 2005

2005-10-10T17:07:50Z

← Older revision		Revision as of 10:07, 10 October 2005
Line 1:		Line 1:
	Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to ~~the~~ system ~~compromisable~~.		Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to a system compromise.

	=== Entropy sources ===		=== Entropy sources ===

	Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.		Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.

Pbug: /* Random sources */

2005-10-10T13:26:12Z

Random sources

← Older revision		Revision as of 06:26, 10 October 2005
Line 1:		Line 1:
	Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to the system compromisable.		Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to the system compromisable.

	=== ~~Random~~ sources ===		=== Entropy sources ===

	Sound cards and their white noise are a good means of ~~randomness~~. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of ~~randomness~~.		Sound cards and their white noise are a good means of entropy. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of entropy.

Pbug at 13:23, 10 October 2005

2005-10-10T13:23:25Z

← Older revision		Revision as of 06:23, 10 October 2005
Line 1:		Line 1:
	Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good. Weak randomness can often lead to the system compromisable.		Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good, more on this at [[RFC]] 4086. Weak randomness can often lead to the system compromisable.

	=== Random sources ===		=== Random sources ===

	Sound cards and their white noise are a good means of randomness. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of randomness.		Sound cards and their white noise are a good means of randomness. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of randomness.

Pbug at 13:07, 10 October 2005

2005-10-10T13:07:10Z

New page

Randomness in some UNIX operating system can be achieved through cryptographically achieved randomness such as arc4random(3) which uses the interfaces ''/dev/random'', ''/dev/arandom'' and ''/dev/urandom''. This method is assumed to be pretty good. Weak randomness can often lead to the system compromisable.

=== Random sources ===

Sound cards and their white noise are a good means of randomness. Some CPU's provide random number generators which the Operating System may use. Crypto-accelerating cards usually provide a source of randomness.