From owner-freebsd-current@FreeBSD.ORG Tue Feb 17 18:15:37 2015 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C1AD75CE for ; Tue, 17 Feb 2015 18:15:37 +0000 (UTC) Received: from mail-ie0-f171.google.com (mail-ie0-f171.google.com [209.85.223.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 91AC0C52 for ; Tue, 17 Feb 2015 18:15:37 +0000 (UTC) Received: by iebtr6 with SMTP id tr6so32246243ieb.7 for ; Tue, 17 Feb 2015 10:15:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=ofurD0yNDXqHJWO+M010H3ZsyY2kvj2Mb5j99VYz+a0=; b=pXPvr/dwcHV84p1+oAB36my8WXnHYgXpX7kCAjHzOcxM3dXpeAkJgVa22Tj1ls1Ncr rzCNLvOmpjM90VuPg2c0VZs1Egocf3wXQyIqTdUM4OblvHTamzcS3cPLWQ/L3+gfLgsm wxaulSMb9ljbAlIg5UVlN+6cGweORZHdyH+zGydVhVoBog3hsX8xDacDwy+cbeuP4Qmm ezVK52XJyC6wtstTpi7JfD2E0oU28CPhSA6ozL1UogOBWezAqHm/9JE6DF45QSwzDsCR guSZ1zOh/9NxaamGFgNyicLnslZBkqFecNG7+ha/FNZicsX8GMcduzai6jrBbNopQkDr 7n8w== X-Received: by 10.107.7.93 with SMTP id 90mr37910368ioh.69.1424196935627; Tue, 17 Feb 2015 10:15:35 -0800 (PST) MIME-Version: 1.0 Sender: carpeddiem@gmail.com Received: by 10.107.158.19 with HTTP; Tue, 17 Feb 2015 10:15:15 -0800 (PST) In-Reply-To: <20150217173726.GA1953@funkthat.com> References: <20150217173726.GA1953@funkthat.com> From: Ed Maste Date: Tue, 17 Feb 2015 13:15:15 -0500 X-Google-Sender-Auth: OxkquA7NcCeo1yvFaaigc_dbd9E Message-ID: Subject: Re: URGENT: RNG broken for last 4 months To: John-Mark Gurney Content-Type: text/plain; charset=UTF-8 Cc: "current@freebsd.org" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Feb 2015 18:15:37 -0000 On 17 February 2015 at 12:37, John-Mark Gurney wrote: > If you are running a current kernel r273872 or later, please upgrade > your kernel to r278907 or later immediately and regenerate keys. One other point - this only applies to keys generated while running on a kernel in that range. If you previously generated keys and then upgraded to r273872 or later there's no concern with respect to key randomness from this issue.