Changes between Version 4 and Version 5 of DUHKattack
- Timestamp:
- 11/02/17 19:59:56 (7 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
DUHKattack
v4 v5 8 8 == How is OpenVPN affected? == 9 9 10 OpenVPN is '''''not''''' affected by DUHK. All random number generation in OpenVPN is based upon the SSL/TLS libraries and, to our knowledge, neither OpenSSL nor mbed TLS depends on the ANSI X9.31 RNG algorithm. Further, OpenVPN does not use or deploy any hard-coded keys or seeds for the RNG. And both OpenSSL and mbed TLS libraries implements re gular re-seeding of the RNG at regular intervals.10 OpenVPN is '''''not''''' affected by DUHK. All random number generation in OpenVPN is based upon the SSL/TLS libraries and, to our knowledge, neither OpenSSL nor mbed TLS depends on the ANSI X9.31 RNG algorithm. Further, OpenVPN does not use or deploy any hard-coded keys or seeds for the RNG. And both OpenSSL and mbed TLS libraries implements re-seeding of the RNG at regular intervals.