Messages in this thread | | | Date | Wed, 21 May 2014 21:39:05 +0200 | From | Andi Kleen <> | Subject | Re: [PATCH] random: mix all saved registers into entropy pool |
| |
> > I think leaking of private keys or similar information is not a > concern. But please prove me wrong. Better you now than someone else > later.
While I don't have a concrete exploit it seems seems dangerous to me. The LibreSSL people just removed a similar behavior from OpenSSL.
-Andi
| |