Re: Flaw in "random32: update the net random state on interrupt and activity"
From: Linus Torvalds <torvalds@linux-foundation.org>
Date: 2020-08-05 01:02:43
Also in:
stable
On Tue, Aug 4, 2020 at 5:52 PM Marc Plumb [off-list ref] wrote:
TL;DR This change takes the seed data from get_random_bytes and broadcasts it to the network, thereby destroying the security of dev/random. This change needs to be reverted and redesigned.
This was discussed.,
It's theoretical, not practical.
The patch improves real security, and the fake "but in theory" kind is
meaningless and people should stop that kind of behavior.
Linus