Skip to content

TLS ISAAC never reseeds #4709

Closed
Closed
@graydon

Description

@graydon

In #4687 we redirected our hashtables to draw their randomization from the TLS ISAAC instance. This instance is not reseeded at all as /dev/urandom is, not even best-effort (eg. when the scheduler is idle or such). It should. As it stands, the mere existence of the TLS ISAAC instance is a security risk to users.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions