News for hackers. Stuff that matters.

A comment on PuTTY vulnerability vuln-p521-bias. Parent comment

Re:PuTTY vulnerability vuln-p521-bias by chasil on Monday April 15, 2024 @04:55PM (#40045451)
This is the text from the original article.

"For this reason, since PuTTY was developed on Windows before it had any cryptographic random number generator at all, PuTTY has always generated its k using a deterministic method, avoiding the need for random numbers at all."

[ Parent | on HN ]
Re:PuTTY vulnerability vuln-p521-bias by gruez on Monday April 15, 2024 @04:57PM (#40045477)
Both my proposed naive method and the PuTTY implementation are deterministic. The only difference is how the primitives (eg. SHA-512) are combined.
[ Parent | on HN ]