lkml.org 
[lkml]   [2009]   [May]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [Security] [patch] random: make get_random_int() more random


On Sat, 16 May 2009, Linus Torvalds wrote:
>
> So "one of X known functions" does not help

Side note - here the keyword is "X known functions". If the function
simply isn't known at all, you've now made it harder by a _much_ higher
factor. If the function is any good (ie doesn't leave any patterns to
guess what function it is), you really basically have to first solve that
independent problem.

And the space of possible functions is pretty damn large, even if you
start with some assumption ("some combination of known good cryptographic
hashes + some unknown seeding algorithm and data").

So practically speaking, nobody ever cracks those things without somehow
decoding the function itself (through doing something like disassembling
obfuscated code).

Linus


\
 
 \ /
  Last update: 2009-10-18 23:28    [W:0.355 / U:1.188 seconds]
©2003-2014 Jasper Spaans. Advertise on this site