Article 56W3S [$] Theoretical vs. practical cryptography in the kernel

[$] Theoretical vs. practical cryptography in the kernel

by
corbet
from LWN.net on (#56W3S)
Shortly before the release of the 5.8 kernel, a brief patch to apseudo-random-number generator (PRNG) used by the networking stack was quietlyapplied to the kernel. As is the norm for such things, the changelog gaveno indication that a security vulnerability had been fixed, but that turnsout indeed to be the case. The resulting controversy had little to do withthe original vulnerability, though, and everything to do with howcryptographic security is managed in the kernel. Figuring prominently inthe discussion was the question of whether theoretical security can undermine security in thereal world.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments