2 ms·
The time-based seed was also a fatal flaw in Netscape's implementation of SSL (not TLS!) back in 1996. https://people.eecs.berkeley.edu/~daw/papers/ddj-netscap
by schoen 5y ago
The time-based seed was also a fatal flaw in Netscape's implementation of SSL (not TLS!) back in 1996.
https://people.eecs.berkeley.edu/~daw/papers/ddj-netscape.html https://people.eecs.berkeley.edu/~daw/papers/ddj-netscape.ht...
Kaspersky re-implemented a famous cryptographic vulnerability from that era in a modern product. :-(