Hi,

I've disabled logins with DSA keys on dev.laptop.org.  Turns out that
while your RSA key is only vulnerable if *created* on a weak Debian or
Ubuntu machine, your DSA key is vulnerable if *used* on Debian/Ubuntu¹,
due to DSA having a greater reliance on randomness.

Please mail [EMAIL PROTECTED] if you were using a DSA key that you
now need to replace.

- Chris.

¹:  http://blog.sesse.net/blog/tech/2008-05-14-17-21_some_maths.html
-- 
Chris Ball   <[EMAIL PROTECTED]>
_______________________________________________
Devel mailing list
[email protected]
http://lists.laptop.org/listinfo/devel

Reply via email to