[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dowkd.pl false positives




On May 17, 2008, at 2:23 PM, Florian Weimer wrote:

Someone has added a warning to the wiki page
<http://wiki.debian.org/SSLkeys> that dowdkd.pl "produces many false
positives".

Even if there are bugs in the script, this is *very* unlikely.  Could
someone please provide such an alleged false positive?

Perhaps confusion over false negatives - as the current ring does not include
all endian/cpu flavours - it is possible (currently) for it to return no
compromised keys - while there are in fact some. As the tool does not yet
check for all keys.

Dw.


Reply to: