George Ou's technology blog: Making tech easy http://www.formortals.com/Home/tabid/36/BlogId/1/Default.aspx en-US george_ou@lanarchitect.net Admin@formortals.com Wed, 03 Dec 2008 00:49:34 GMT Wed, 03 Dec 2008 00:49:34 GMT http://backend.userland.com/rss Blog RSS Generator Version 3.4.0.39853 <p><font size="2">One day after the Debian Linux project </font><a href="http://www.debian.org/security/2008/dsa-1571"><font size="2">announced a massive flaw</font></a><font size="2"> where&#160;its&#160;implementation of OpenSSL key generators only used 15 bits of entropy (32,768 combinations), HD Moore (creator of Metasploit) has released a </font><a href="http://metasploit.com/users/hdm/tools/debian-openssl/"><font size="2">tool to exploit it</font></a><font size="2">.&#160; Nate McFeters has a </font><a href="http://blogs.zdnet.com/security/?p=1102"><font size="2">good write up here</font></a><font size="2"> on this matter.</font></p> <p><font size="2">This means that any asymmetric crypto keys generated between September 2006 and 5/13/2008 a http://www.formortals.com/Home/tabid/36/EntryID/43/Default.aspx george_ou@lanarchitect.net http://www.formortals.com/Home/tabid/36/EntryID/43/Default.aspx#Comments http://www.formortals.com/Default.aspx?tabid=36&EntryID=43 Thu, 15 May 2008 15:00:00 GMT 0 http://www.formortals.com/DesktopModules/Blog/Trackback.aspx?id=43