3 ms·
Are any OpenSSL fork vulnerable in the same way?
by RRRA 10y ago
Are any OpenSSL fork vulnerable in the same way?
- Titanous 10y agoNo. Both BoringSSL and LibreSSL use substantially different (and safer) systems for their CSPRNG. https://boringssl.googlesource.com/boringssl.git/+/refs/heads/master/crypto/rand/rand.c https://boringssl.googlesource.com/boringssl.git/+/refs/head... https://github.com/libressl-portable/openbsd/blob/master/src/lib/libc/crypt/arc4random.3 https://github.com/libressl-portable/openbsd/blob/master/src...