Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-11 Thread Simon Josefsson
[EMAIL PROTECTED] writes: Simon Josefsson [EMAIL PROTECTED] wrote: The Linux RNG have some issues, see http://eprint.iacr.org/2006/086. Libgcrypt's estimates of the quality of the /dev/*random data is pessimistic. That paper deserves a longer reply, but even granting every claim it makes,

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-11 Thread sacrificial-spam-address
Simon Josefsson [EMAIL PROTECTED] wrote: The Linux RNG have some issues, see http://eprint.iacr.org/2006/086. Libgcrypt's estimates of the quality of the /dev/*random data is pessimistic. That paper deserves a longer reply, but even granting every claim it makes, the only things it complains

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-11 Thread sacrificial-spam-address
Simon Josefsson [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: That paper deserves a longer reply, but even granting every claim it makes, the only things it complains about are forward secrecy (is it feasible to reproduce earlier /dev/*random outputs after capturing the internal state of

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-11 Thread Simon Josefsson
[EMAIL PROTECTED] writes: Simon Josefsson [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: That paper deserves a longer reply, but even granting every claim it makes, the only things it complains about are forward secrecy (is it feasible to reproduce earlier /dev/*random outputs after

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-11 Thread Matt Mackall
On Fri, 2008-04-11 at 16:03 +0200, Simon Josefsson wrote: [EMAIL PROTECTED] writes: Simon Josefsson [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: That paper deserves a longer reply, but even granting every claim it makes, the only things it complains about are forward secrecy (is

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-10 Thread Daniel Kahn Gillmor
I've packaged gnutls 2.3.4 (upstream's current development version) for my own testing, and i see the same behavior described in this ticket using 2.3.4 on a lenny/sid i386 system (see strace and package versions below). So the problem isn't unique to the version in lenny. I'm afraid I don't

Bug#475168: [Pkg-gnutls-maint] Bug#475168: certtool --generate-dh-params is ridiculously wasteful of entropy

2008-04-10 Thread sacrificial-spam-address
Daniel Kahn Gillmor [EMAIL PROTECTED] wrote: I've packaged gnutls 2.3.4 (upstream's current development version) for my own testing, and i see the same behavior described in this ticket using 2.3.4 on a lenny/sid i386 system (see strace and package versions below). So the problem isn't unique