tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: FreeBSD rnd bug



   Date: Fri, 20 Feb 2015 12:24:14 +0100
   From: Fredrik Pettai <pettai%nordu.net@localhost>

   Are there any (continues) selftests performed on the data that
   comes out of fast/strong?

Yes, for cprng_strong.  However, statistical tests on the output of a
cryptographic PRNG will not detect failure to seed it.  They will
detect only catastrophic bugs in the PRNG itself.  (They will also
sometimes spuriously fire, as is the nature of statistical tests on
uniform random data.)


Home | Main Index | Thread Index | Old Index