GnuPG PRNG insecure?

Simon Josefsson jas at
Fri Feb 8 20:07:01 CET 2002

pgut001 at (Peter Gutmann) writes:

> Incidentally, this bug is identical to the PGP 2.x xorbytes bug, a web search
> for that name will find further discussion on this topic.  I think copying
> xorbytes is taking GPG's PGP compatibility a bit far :-).

Makes you wonder if this code was simply copied from PGP?  What about
license etc?

More information about the Gnupg-devel mailing list