Re: fix for no ssh
On Mon, Jul 08, 2019 at 04:18:28PM -0000, Curt wrote:
> Well, looking at Ted Ts'o short patch, where he mentions the security
> implications of the thing at some length, *twice*
I think that some of Ted's stance might not be because Ted thinks it
is dangerous but because there has been in the past very vocal
opposition to any use of RDRAND, given that it is part of the
unauditable innards of the CPU.
> and reading the following from Ts'o circa 2013:
> I am so glad I resisted pressure from Intel engineers to let /dev/random
> rely only on the RDRAND instruction.
Note that relying *only* on RDRAND and using RDRAND as *one* of the
entropy sources are different situations.
https://bitfolk.com/ -- No-nonsense VPS hosting