[Bug 1183213] Re: pwgen falls back to insecure entropy silently

2014-11-11 Thread Launchpad Bug Tracker
This bug was fixed in the package pwgen - 2.07-1ubuntu1 --- pwgen (2.07-1ubuntu1) vivid; urgency=medium * Resynchronise with Debian (LP: #1183213, #638418, #1349863). Remaining changes: - Fix pwgen -s so it works after other options. - Use correct compiler when cross-bu

[Bug 1183213] Re: pwgen falls back to insecure entropy silently

2013-05-27 Thread mik
Ok, I wasn't happy with the first patch, because some systems might not have FPUs. I've attached a patch that wastes some entropy, but still gives an unbiased /dev/urandom read. The quality of this program is fairly low overall, probably not suitable for main. The phonemes mode produces a tiny a

[Bug 1183213] Re: pwgen falls back to insecure entropy silently

2013-05-27 Thread Ubuntu Foundations Team Bug Bot
The attachment "pwgen-randnum.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-mu

[Bug 1183213] Re: pwgen falls back to insecure entropy silently

2013-05-27 Thread mik
Attached is a patch that fixes the bug: - It will bail out with an error message and exit(1) if there's a problem with /dev/urandom and /dev/random - The modulo bias has been replaced with a fancy cast-as-double, then multiply by 1.0/2**31, then multiply by max_value and cast back as int config

[Bug 1183213] Re: pwgen falls back to insecure entropy silently

2013-05-24 Thread Seth Arnold
Related to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672241 Looks like this whole file needs some attention. Thanks ** Changed in: pwgen (Ubuntu) Status: New => Triaged ** Bug watch added: Debian Bug tracker #672241 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672241 ** In