Security Advisory 2019-06-13 – Reduced initial randomness on FIPS keys

Posted by digitalnalogika on Sunday June 30, 2019 @06:07PM
from the yubico.com dept.

https://www.yubico.com/support/security-advisories/ysa-2019-02/

( 2 comments | 4 points | on HN )

Re:Security Advisory 2019-06-13 – Reduced initial randomness... by londons_explore on Monday July 01, 2019 @01:48AM (#20322763)

Rather worrying for a device whose entire purpose is to generate and store keys...

Also especially worrying considering a deliberately 'bad' random number generator is almost the perfect way to subvert a device, since true random is inprovable

[ Parent | on HN ]

Re:Security Advisory 2019-06-13 – Reduced initial randomness... by andbberger on Monday July 01, 2019 @12:30PM (#20326990)

meh this specifically pertains to the 2-factor feature, and if your 2nd factor is a secret you have gone very somewhere.

[ Parent | on HN ]