3 ms·
And it still uses OpenSSL as a CSPRNG, rather than the operating system's CSPRNG (CryptGenRandom, /dev/urandom, etc.). I guess maybe they'll fix that in 6?
by sarciszewski 11y ago
And it still uses OpenSSL as a CSPRNG, rather than the operating system's CSPRNG (CryptGenRandom, /dev/urandom, etc.). I guess maybe they'll fix that in 6?
- orthecreedence 11y agoAnd use what in Windows? A closed-source CSPRNG? Has there ever been a serious vulnerability/problem found with OpenSSL's CSPRNG? I'm actually curious as to why this is an issue.
- slasaus 11y agoOnly the OS can guarantee that some entropy is not handed out twice. If you can't trust your OS with that, you might have bigger problems.