OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] how i stopped worrying and loved the backdoor

From: Marsh Ray (marshextendedsubset.com)
Date: Fri Dec 24 2010 - 19:24:44 CST

On 12/24/2010 07:08 PM, Dan Kaminsky wrote:
>
> Don't we have hardware RNG in most motherboard chipsets nowadays?
>
> (Not that you should exclusively trust it, but the nature of RNG's is
> that it's easy to mix in sources.)

Haha, you're going to love this:

> http://code.bsd64.org/cvsweb/openbsd/src/sys/dev/rnd.c?rev=1.106;content-type=text%2Fplain
>
> switch(minor(dev)) {
> case RND_RND:
> ret = EIO; /* no chip -- error */
> break;
> case RND_SRND:
> case RND_URND:
> case RND_ARND_OLD:
> case RND_ARND:
> arc4random_buf(buf, n);
> break;
> default:
> ret = ENXIO;
> }

- Marsh

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/