FreeBSD-Current Random Number Generator Broken

'The FreeBSD random number has been discovered to be generating possibly predictable SSH keys and SSL certificates for months. Time to regenerate your keys and certs if using FreeBSD-Current. A message to the freebsd-current mailing list reads in part: "If you are running a current kernel r273872 or later, please upgrade your kernel to r278907 or later immediately and regenerate keys. I discovered an issue where the new framework code was not calling randomdev_init_reader, which means that read_random(9) was not returning good random data. read_random(9) is used by arc4random(9) which is the primary method that arc4random(3) is seeded from."' -- source: http://it.slashdot.org/story/15/02/18/2026258 Cheers, Peter -- Peter Reutemann, Dept. of Computer Science, University of Waikato, NZ http://www.cms.waikato.ac.nz/~fracpete/ Ph. +64 (7) 858-5174

On Thu, 19 Feb 2015 11:49:14 +1300, Peter Reutemann wrote:
'The FreeBSD random number has been discovered to be generating possibly predictable SSH keys and SSL certificates for months."'
Random numbers are hard <https://www.schneier.com/blog/archives/2012/02/lousy_random_nu.html>.
participants (2)
-
Lawrence D'Oliveiro
-
Peter Reutemann