On Sun, Jun 24, 2012 at 1:37 PM, Moritz Muehlenhoff <j...@debian.org> wrote: > ... > Package : python-crypto > Vulnerability : programming error... > It was discovered that that the ElGamal code in PythonCrypto, a > collection of cryptographic algorithms and protocols for Python used > insecure insufficient prime numbers in key generation
i wish i had a dollar for every not-so-random random number generator error that has transpired the last few years. i could pay for DEF CON. ;) decades pass, and yet people still fuck up the fundamentals. regularly... how many of you fools mix a hw entropy source into your crypto keying? ever hear of 82802? XSTORE? RDRAND? lava lamps? </cry> _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
