News for hackers. Stuff that matters.

A comment on Some AMD CPU's RDRAND might not return random data after a suspend/resume. Parent comment

Re:Some AMD CPU's RDRAND might not return random data after ... by amluto on Tuesday May 07, 2019 @12:11PM (#19850816)
RDRAND has major benefits over any CSPRNG: there is no software-visible state that could possibly leak. With attacks like Spectre, there’s always a concern that your CSPRNG secrets could be leaked.
[ Parent | on HN ]
Re:Some AMD CPU's RDRAND might not return random data after ... by lvh on Tuesday May 07, 2019 @03:59PM (#19852913)
The scheme we’re discussing XORs the two at the end, so that flaw doesn’t apply. Also: empirically, “kernel leaks CSPRNG” state does not seem to be as much of a problem as “userspace is convinced it knows better than urandom/getrandom”.
[ Parent | on HN ]