Re: openssl-blacklist two keys per one pid

On Wed, 21 May 2008, Jan Tomasek wrote: Jamie Strandboge wrote: I discovered that there is also 3rd key which you get if you pass empty file by -rand. Keys created in this way are still the same so it's another possible compromised key. I'm not sure if it worth spend time on counting

Re: openssl-blacklist two keys per one pid

On Wed, 21 May 2008, Jamie Strandboge wrote: I discovered that there is also 3rd key which you get if you pass empty file by -rand. Keys created in this way are still the same so it's another possible compromised key. I'm not sure if it worth spend time on counting this keys

Re: openssl-blacklist two keys per one pid

On Mon, 19 May 2008, Jan Tomasek wrote: Kees Cook wrote: The rule is simple. When the ~/.rnd file doesn't exist I get one key and in other situation I get another (that listed in Ubuntu openssl-blacklist) key. Because of this problem openssl-blacklist has to be twice big than