lkml.org 
[lkml]   [2009]   [May]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [Security] [patch] random: make get_random_int() more random


    On Sat, 16 May 2009, Linus Torvalds wrote:
    >
    > So "one of X known functions" does not help

    Side note - here the keyword is "X known functions". If the function
    simply isn't known at all, you've now made it harder by a _much_ higher
    factor. If the function is any good (ie doesn't leave any patterns to
    guess what function it is), you really basically have to first solve that
    independent problem.

    And the space of possible functions is pretty damn large, even if you
    start with some assumption ("some combination of known good cryptographic
    hashes + some unknown seeding algorithm and data").

    So practically speaking, nobody ever cracks those things without somehow
    decoding the function itself (through doing something like disassembling
    obfuscated code).

    Linus


    \
     
     \ /
      Last update: 2009-10-18 23:28    [W:0.026 / U:122.572 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site