<div dir="ltr"><div>ianG wrote:</div><div><br></div><div>> I'm curious -- where is BSAFE used? As far as I was aware, it was</div><div>> mostly shipped to USG. Is it in general shipping with in any user field?</div>
<div>> You mention “high security” proprietary windows and java applications</div><div>> ... but are those things we should be worried about if we don't use</div><div>> them? Any clue as to which they are?</div>
<div>As far as I know it's used in a lot of commercial windows software,</div><div>although I cannot name any particulars. If you google a bit you'll be</div><div>able to find enough.</div><div><br></div><div>> I need a pithy statement for this.</div>
<div>Whats a pithy statement? :)</div><div><br></div><div>>> Dan Kaminsky has proposed an universal RNG a couple of times now - but</div><div>>> again, this is not to be used in production.</div><div>>></div>
<div>>> See section 2: 'Four Lines of Javascript that Can’t Possibly Work So</div><div>>> why do they?'</div><div>>> <a href="http://openwall.info/wiki/_media/people/solar/pocorgtfo01.pdf">http://openwall.info/wiki/_media/people/solar/pocorgtfo01.pdf</a></div>
<div>> </div><div>> </div><div>> :) So, that works as a quickie. But it is also quite easy to attack,</div><div>> if that is the only thing going on. RNGs are not easy on software</div><div>> engineering.</div>
<div>Yea I just found it to be interesting. Didn't took to long for someone</div><div>to find weaknesses: See the current issue -</div><div><a href="http://openwall.info/wiki/_media/people/solar/pocorgtfo02.pdf">http://openwall.info/wiki/_media/people/solar/pocorgtfo02.pdf</a></div>
<div>(BTW this pdf is also a bootable operating system AND zip file!)</div><div><br></div><div>Aaron</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jan 7, 2014 at 9:56 AM, ianG <span dir="ltr"><<a href="mailto:iang@iang.org" target="_blank">iang@iang.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 25/11/13 20:15 PM, Aaron Zauner wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The counterpoint is DUAL_EC, as it was a default engineered by the NSA's finest, and recommended by RSA because "our technology is backed by highly regarded cryptographic experts." Unlike open source, they say :) So we could have fixed it, but only by going against the best advice available. Not really helpful as a strategy for the future, if you get my drift…<br>
</blockquote>
..then RSA had to recall BSAFE - a toolkit that is widely used in “high security” proprietary windows and java applications. oh noes!1<br>
<a href="http://www.wired.com/threatlevel/2013/09/rsa-advisory-nsa-algorithm/" target="_blank">http://www.wired.com/<u></u>threatlevel/2013/09/rsa-<u></u>advisory-nsa-algorithm/</a><br>
</blockquote>
<br>
<br></div>
I'm curious -- where is BSAFE used? As far as I was aware, it was mostly shipped to USG. Is it in general shipping with in any user field? You mention “high security” proprietary windows and java applications ... but are those things we should be worried about if we don't use them? Any clue as to which they are?<br>
<br>
Yes, this is off topic to ACH :)<div class="im"><br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
In short: use it as it is setup, or write your own. There isn't a lot of middle ground.<br>
</blockquote>
I absolutely agree. RNGs that get shipped by operating systems are audited heavily, custom RNGs are not. As stated before: I haven’t found a analysis/research paper on HaveGE, the original paper describung the algorithm is years old. This does not seem to be well audited. Proof me wrong.<br>
</blockquote>
<br>
<br></div>
I need a pithy statement for this.<div class="im"><br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Dan Kaminsky has proposed an universal RNG a couple of times now - but again, this is not to be used in production.<br>
<br>
See section 2: 'Four Lines of Javascript that Can’t Possibly Work So why do they?'<br>
<a href="http://openwall.info/wiki/_media/people/solar/pocorgtfo01.pdf" target="_blank">http://openwall.info/wiki/_<u></u>media/people/solar/<u></u>pocorgtfo01.pdf</a><br>
</blockquote>
<br>
<br></div>
:) So, that works as a quickie. But it is also quite easy to attack, if that is the only thing going on. RNGs are not easy on software engineering.<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
<br>
iang<br>
<br>
</font></span></blockquote></div><br></div>