Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Jan 2014 14:08:12 -0500
From:      Mike Tancsa <mike@sentex.net>
To:        Darren Pilgrim <list_freebsd@bluerosetech.com>, freebsd-stable@freebsd.org
Subject:   Re: [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-14:01.random
Message-ID:  <52D6DC9C.3060007@sentex.net>
In-Reply-To: <52D6D93F.7020600@bluerosetech.com>
References:  <201401142011.s0EKBoi7082738@freefall.freebsd.org> <52D6BF9C.8070405@bluerosetech.com> <52D6D5C7.80200@sentex.net> <52D6D93F.7020600@bluerosetech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 1/15/2014 1:53 PM, Darren Pilgrim wrote:
> 
> Yes, that's an obvious consequence of a compromised RNG; but that's not
> what I was asking.  I'm asking how the attacker could compromise the
> hardware RNG without also obtaining effectively unfettered access to the
> entire system.

I think the fear is at manufacturing time.  i.e. the suspicion is that
some govt agency asked a design weakness be built in.  Whether thats
true or a reasonable fear or not, I am not one to say....


	---Mike



-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52D6DC9C.3060007>