diff options
| author | Nick Mathewson <nickm@torproject.org> | 2013-12-18 21:55:06 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2013-12-18 21:55:06 -0500 |
| commit | dabdc339fe5abc5949f087621996672c122101b6 (patch) | |
| tree | f5e6f471eb9776e822309c34a530a87da9356933 /changes | |
| parent | 561d9880f8025ddbcb2f0a586d0677908320af4f (diff) | |
| parent | 7b87003957530427eadce36ed03b4645b481a335 (diff) | |
| download | tor-dabdc339fe5abc5949f087621996672c122101b6.tar tor-dabdc339fe5abc5949f087621996672c122101b6.tar.gz | |
Merge branch 'bug10402_redux_024' into maint-0.2.4
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug10402 | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/changes/bug10402 b/changes/bug10402 new file mode 100644 index 000000000..eac00bdc6 --- /dev/null +++ b/changes/bug10402 @@ -0,0 +1,11 @@ + o Major bugfixes: + - Do not allow OpenSSL engines to replace the PRNG, even when + HardwareAccel is set. The only default builtin PRNG engine uses + the Intel RDRAND instruction to replace the entire PRNG, and + ignores all attempts to seed it with more entropy. That's + cryptographically stupid: the right response to a new alleged + entropy source is never to discard all previously used entropy + sources. Fixes bug 10402; works around behavior introduced in + OpenSSL 1.0.0. Diagnosis and investigation thanks to "coderman" + and "rl1987". + |