[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: NYT on Netscape Crack



On Tue, 19 Sep 1995, Eli Brandt wrote:

> It sounds as if Netscape thinks that public knowledge of the key
> generation is part of the problem.  I hope somebody on the security
> team convinces management that entropy is more important than publicity.

No matter what they say in the press, I doubt it will take more than a few
weeks to reverse engineer the new RNG seeder and figure out where the data
comes from. 

I am hoping it was more of a PR thing than a technical thing.  I hope 
that Netscape tells us their RNG seed so Cyperhpunks don't have to go to all 
the trouble.  If they tell us, we can let them know if it is a reasonable 
mechanism or bogus.

-Thomas