[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-14:01.random

[Jim Ohlstein]

Hello,

On 1/15/14, 2:08 PM, Mike Tancsa wrote:
> On 1/15/2014 1:53 PM, Darren Pilgrim wrote:
>>
>> Yes, that's an obvious consequence of a compromised RNG; but that's not
>> what I was asking.  I'm asking how the attacker could compromise the
>> hardware RNG without also obtaining effectively unfettered access to the
>> entire system.
>
> I think the fear is at manufacturing time.  i.e. the suspicion is that
> some govt agency asked a design weakness be built in.  Whether thats
> true or a reasonable fear or not, I am not one to say....
>
>
> 	---Mike
>
>

If you belive the NY Times (et alia), it is a legitimate concern:


http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html

http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html?_r=1&


-- 
Jim Ohlstein