3 ms·
Yes -- that's what I meant by "this was exactly the case where it could matter".
by ScottBurson 13y ago
Yes -- that's what I meant by "this was exactly the case where it could matter".
- saurik 13y agoSorry, I had presumed you meant simply "we were doing key generation" not "we realized that this directly led to not actually getting random data", especially given the "misgivings", which seemed like a light statement.
- ScottBurson 13y agoSorry I was unclear. I think we only had "misgivings" because the key we were generating had only relatively minor use in the product. Alas, I don't recall exactly what that was, and it's certainly possible, in retrospect, that we didn't care as much about the implications of using /dev/urandom as we should have. But that was pre-Snowden.