Re: FreeBSD rnd bug

"J. Lewis Muir" <[email protected]> Fri, 20 Feb 2015 09:41:48 -0600

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On 2/20/15 7:55 AM, Taylor R Campbell wrote:
> Yes, for cprng_strong.  However, statistical tests on the output of
> a cryptographic PRNG will not detect failure to seed it.  They will
> detect only catastrophic bugs in the PRNG itself.  (They will also
> sometimes spuriously fire, as is the nature of statistical tests on
> uniform random data.)

See Dilbert's tour of accounting:

  http://dilbert.com/strip/2001-10-25

:-)

Lewis