Re:Trivial authentication bypass in libssh leaves servers wi...
by lrvick on Thursday October 18, 2018 @12:49PM
(#18249894)
Make sure the PRNG does not source enough entropy thus dramatically weakening all session keys to a crackable level.
Or do like WEP and recycle your one time pads. Lots of subtle design flaws one can introduce that generally get spotted in blackbox testing, and not in code.
Or do like WEP and recycle your one time pads. Lots of subtle design flaws one can introduce that generally get spotted in blackbox testing, and not in code.