>>    "How important is the PRNG seed to the 
>>    total security of your program ?"

How quickly they forget... :(

Your SSL connections can be broken.  Several years ago Netscape used a 
poor random seed (like getpid() or'd into the time() or some such), and 
Dave Wagner (et al) at Berkeley were able to completely decode the SSL 
traffic.

Don't do this.  Don't do this.  Do not do this.
        /r$

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to