News for hackers. Stuff that matters.
Re:The getrandom(2) system call was requested by the LibreSS... by MichaelGG on Thursday July 17, 2014 @08:20PM (#8051027)
What is a case where a random IV needs a different entropy source than a session key?

And if we're assuming the entropy pool is being compromised (full state read by attacker) from time to time, isn't it foolish to be generating keys on such a machine? Why would new state not be compromised in he same way the previous state was? I understand the system design may want to provide a robust RNG, but further than that seems slightly pointless.

There are no comments on this comment yet.