Comment on TrueCrypt must not dieparentComments−quasque12yLinux security was significantly reduced at one point because somebody changed int i to int i=0Could you please elaborate on this one?−SoftwareMaven12yIt's been a while. I should have restricted it to Debian: http://jblevins.org/log/ssh-vulnkey−nikbackm12ySeems to me they relied on the uninitialized memory of a stack variable as a partial source of randomness for key generation.Initializing the variable with 0 removed that part.−quasque12yYour explanation makes sense. Though I'm still curious as to when this happened and what the impact was.
Comments
Could you please elaborate on this one?
It's been a while. I should have restricted it to Debian: http://jblevins.org/log/ssh-vulnkey
Seems to me they relied on the uninitialized memory of a stack variable as a partial source of randomness for key generation.
Initializing the variable with 0 removed that part.
Your explanation makes sense. Though I'm still curious as to when this happened and what the impact was.