News for hackers. Stuff that matters.

A comment on Fixing Getrandom(). Parent comment

Re:Fixing Getrandom() by dependenttypes on Tuesday October 01, 2019 @07:06PM (#21131838)
He is saying that using a malicious source of entropy that can read the current state of the pool (such as RDRAND) can harm security.
[ Parent | on HN ]
Re:Fixing Getrandom() by tptacek on Wednesday October 02, 2019 @12:12AM (#21133367)
This is an extremely weird threat model, in that it implies an actively adversarial CPU that can't be trusted with or without RDRAND.
[ Parent | on HN ]
Re:Fixing Getrandom() by tzs on Wednesday October 02, 2019 @12:16AM (#21133387)
If you only have one source that you suspect might be malicious (such as RDRAND), can't you just use that as the first source?
[ Parent | on HN ]