[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e

To: [email protected]
Subject: [Full-disclosure] RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e
From: [email protected] (coderman)
Date: Sat, 14 Dec 2013 08:40:34 -0800
Cc: cpunks <[email protected]>, Full Disclosure <[email protected]>
In-reply-to: <[email protected]>
References: <CAJVRA1RZJgO2wOKsY8pMxnwpHPnLgx9DiW4_1CzxotT==f3rFw@mail.gmail.com> <[email protected]>

On Sat, Dec 14, 2013 at 8:31 AM, Dennis E. Hamilton
<[email protected]> wrote:
> It would have been good if you had said "security issue" ...


i think the word you're looking for is "Feature".

... but you and me are not the customer.   ;)

References:
- RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e
  - From: [email protected] (coderman)

Prev by Date: cognitive dissonance in threat modelling?
Next by Date: RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e
Previous by thread: RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e
Next by thread: RDRAND used directly when default engines loaded in openssl-1.0.1-beta1 through openssl-1.0.1e
Index(es):
- Date
- Thread