GnuPG PRNG insecure?

Sam Roberts sroberts at uniserve.com
Sat Feb 9 04:56:01 CET 2002


Quoting Werner Koch <wk at gnupg.org>, who wrote:
> On Thu, 7 Feb 2002 20:06:03 +0100, Stefan Keller said:
> Thanks Stefan for pointing this out.  As Peter already mentioned, this
> is not a serious flaw because an attacker is not able to mix data of
> his choice in.  I fixed it of course.

Perhaps it should be fixed in the stable 1.0 branch as well?

Sam

-- 
Sam Roberts <sroberts at uniserve.com> (Vivez sans temps mort!)




More information about the Gnupg-devel mailing list