[TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 20 26-07-08)

"Salz, Rich" <[email protected]> Fri, 17 Jul 2026 14:09:38 +0000

Newsgroups	gmane.ietf.tls
Message-ID	<MN2PR17MB4031716C3741B0F541F389D6CDC62@MN2PR17MB4031.namprd17.prod.outlook.com>

  *
However, the inherent limitation lies in the fact that OpenSSL's CSPRNG derives its entropy from the OS (kernel) RNG; consequently, a compromised kernel RNG would also compromise the OpenSSL RNG.

If your kernel is compromised there is nothing you can do, you’ve lost.

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]