bugtraq - Re: Flaw in commonly used bash random seed method

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <a260a2190604040802o6fbcffcfq4860fcc2c3e32af8@mail.gmail.com>
Date: Tue, 4 Apr 2006 17:02:12 +0200
From: Matthijs <thotter@...il.com>
To: "Dave English" <dave.english@...s.net>, bugtraq@...urityfocus.com
Subject: Re: Flaw in commonly used bash random seed method


Erm excuse me, the seed should be 4 BYTES, not bits.
I should really check my posts better before hitting send...

On 4/4/06, Matthijs <thotter@...il.com> wrote:
> altough it returns a number between 0 and 32767, it indeed saves a 32
> bit number, so the cycle length of this linear congruential generator
> is actually 2^32. So yes, the seed should be 4 bits and the generator
> is better then I first tought. Sorry about that, I should have checked
> the code a bit more careful.