Re: FreeBSD rnd bug

Taylor R Campbell <[email protected]>
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]> 
   Date: Fri, 20 Feb 2015 12:24:14 +0100
   From: Fredrik Pettai <[email protected]>

   Are there any (continues) selftests performed on the data that
   comes out of fast/strong?

Yes, for cprng_strong.  However, statistical tests on the output of a
cryptographic PRNG will not detect failure to seed it.  They will
detect only catastrophic bugs in the PRNG itself.  (They will also
sometimes spuriously fire, as is the nature of statistical tests on
uniform random data.)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.