[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #13696 [Tor]: Use syscall-based entropy reading where possible.
#13696: Use syscall-based entropy reading where possible.
-------------------------+------------------------------
Reporter: nickm | Owner: yawning
Type: enhancement | Status: needs_review
Priority: Medium | Milestone: Tor: 0.2.???
Component: Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-relay | Actual Points:
Parent ID: | Points:
Sponsor: |
-------------------------+------------------------------
Changes (by yawning):
* status: needs_revision => needs_review
Comment:
Replying to [comment:14 teor]:
> I'm still ok with implementing the call to SecRandomCopyBytes on OS X /
iOS, because it has better semantics (lower failure rate).
This sounds reasonable. The non-Dual EC DRBG constructs in SP 800-90 are
secure as far as I know. You say it uses ECB, but that's just because
they're implementing CTR mode right?
I'm comfortable with the branch the way it is, but it's probably best if
nickm gives further feedback regarding the things from the review that I
didn't want to change.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13696#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs