Re: [cryptography] Intel Security Driver and AVX CPUs (rdrand)

2011-09-01 Thread David Johnston
On 9/1/2011 5:12 PM, Jeffrey Walton wrote: Hi All, For some time, Intel has offered a Security Driver for Windows [1]. It basically allows us to use the 810 chipset and friends as a PRNG source via a CSP: if(CryptAcquireContext(&hProvider, NULL, INTEL_DEF_PROV, PROV_INTEL_SEC, 0)) {

Re: [cryptography] *.google.com certificate issued by DigiNotar

2011-09-01 Thread Peter Gutmann
[NB: CC'd to the randombit cryptography list, since this is an interesting point for discussion]. Ian G writes: >What we'll likely see now is a series of breaches at multiple levels to >acquire and misuse certs. We've seen compromises in the past, but what makes >this new is that we have e

Re: [cryptography] Intel Security Driver and AVX CPUs (rdrand)

2011-09-01 Thread Peter Gutmann
Jeffrey Walton writes: >Does anyone know if Intel is shipping an updated driver which wraps/includes >rdrand from AVX? I posted the following to the list a few months back: -- Snip -- In case this is useful to anyone, here's the Windows code to use rdrand, to complement the gcc version for Uni

[cryptography] Intel Security Driver and AVX CPUs (rdrand)

2011-09-01 Thread Jeffrey Walton
Hi All, For some time, Intel has offered a Security Driver for Windows [1]. It basically allows us to use the 810 chipset and friends as a PRNG source via a CSP: if(CryptAcquireContext(&hProvider, NULL, INTEL_DEF_PROV, PROV_INTEL_SEC, 0)) { CryptGenRandom(hProvider, size, block); } Do

Re: [cryptography] An appropriate image from Diginotar

2011-09-01 Thread Ralph Holz
Hi, >> --- >> @nocombat writes: SSL Observatory: select count(Subject) from >> valid_certs where Issuer like '%diginotar%' â01 >> --- > > They've only issued 700-odd SSL certs? Wow, that's low. OTOH since their > gravy train is mainly built around the Dutch government's PKI letter of > marqu