Messages in this thread | ![/](/images/icornerl.gif) | | Date | Fri, 15 Aug 2003 00:40:04 -0700 | From | "David S. Miller" <> | Subject | Re: [RFC][PATCH] Make cryptoapi non-optional? |
| |
On Fri, 15 Aug 2003 09:30:03 +0200 Andries Brouwer <aebr@win.tue.nl> wrote:
> On Thu, Aug 14, 2003 at 06:17:13PM -0600, Val Henson wrote: > > > entropy(x) >= entropy(x xor y) > > entropy(y) >= entropy(x xor y) > > Is this trolling? Are you serious?
These lemma are absolutely true. XOR is the worst way to gain entropy because it means that if you are able to know anything about either 'x' or 'y' then you are able to know something about the resulting entropy.
It is the reason our ipv4 routing cache hashes used to be exploitable.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |