Some colleagues (Hovav Shacham, Brandon Enright, Scott Yikel, and Stefan Savage) and I have been doing some followup work on the Debian OpenSSL PRNG bug. Perry suggested that some cryptography readers might be interested in our preliminary analysis of the DHE angle, which can be found here:
http://www.educatedguesswork.org/2008/08/the_debian_openssl_prng_bug_an.html Also, Hovav gave a WIP on this topic at USENIX Security. The slides are at: http://cs.ucsd.edu/~hovav/dist/debianwip.pdf -Ekr --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]