4 ms·
A new cloud instance seems like a small problem. The host could just generate an entropy file for the first boot.
by gnud 7y ago
A new cloud instance seems like a small problem. The host could just generate an entropy file for the first boot.
- caf 7y agoYes - the hard case is a little flash-based low power ARM router, cloned by the million.
- Reelin 7y agoFrom 2012, but still at least somewhat relevant (https://factorable.net/weakkeys12.extended.pdf https://factorable.net/weakkeys12.extended.pdf). > RSA and DSA can fail catastrophically when used with malfunctioning random number generators ... network survey of TLS and SSH servers and present evidence that vulnerable keys are surprisingly widespread ... we are able to obtain RSA private keys for 0.50% of TLS hosts and 0.03% of SSH hosts, because their public keys shared nontrivial common factors due to entropy problems, and DSA private keys for 1.03% of SSH hosts, because of insufficient signature randomness ... the vast majority appear to be headless or embedded devices ...