From: Aymeric Vitte <vitteaymeric@gmail•com>
To: Jason Davies <jason@jasondavies•com>
Cc: Bitcoin Protocol Discussion <bitcoin-dev@lists•linuxfoundation.org>
Subject: Re: [bitcoin-dev] KETAMINE: Multiple vulnerabilities in SecureRandom(), numerous cryptocurrency products affected.
Date: Tue, 10 Apr 2018 15:50:40 +0200 [thread overview]
Message-ID: <b2f07b9d-14e6-60f6-29fa-dc397dccbc48@gmail.com> (raw)
In-Reply-To: <E0F193EA-9479-4E07-8B91-B77D33FB0CBE@jasondavies.com>
Indeed, this impacts jsbn only normally since all others from the time
getRandomValues was available are supposed to implement both
Le 10/04/2018 à 15:32, Jason Davies a écrit :
>>> Note that even with v1.4, it still does not use high-quality entropy for
>>> Internet Explorer, because getRandomValues is provided under window.msCrypto
>>> for that browser.
>> I don't know for that one, what was the issue?
> I simply meant that Internet Explorer implements the Web Cryptography API under
> window.msCrypto instead of window.crypto. Thus, unless
> msCrypto.getRandomValues is used, high-quality entropy will not have been used
> by any of these libraries under Internet Explorer.
>
> --
> Jason Davies, https://www.jasondavies.com/
>
--
Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions
Zcash wallets made simple: https://github.com/Ayms/zcash-wallets
Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets
Get the torrent dynamic blocklist: http://peersm.com/getblocklist
Check the 10 M passwords list: http://peersm.com/findmyass
Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms
next prev parent reply other threads:[~2018-04-10 13:50 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-04-06 19:53 ketamine
2018-04-06 20:51 ` Matias Alejo Garcia
2018-04-09 21:11 ` Mustafa Al-Bassam
2018-04-09 21:17 ` Mustafa Al-Bassam
2018-04-09 23:39 ` Mustafa Al-Bassam
2018-04-10 8:51 ` Jason Davies
2018-04-10 13:15 ` Aymeric Vitte
2018-04-10 13:32 ` Jason Davies
2018-04-10 13:50 ` Aymeric Vitte [this message]
2018-04-10 0:42 ` Jason Davies
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b2f07b9d-14e6-60f6-29fa-dc397dccbc48@gmail.com \
--to=vitteaymeric@gmail$(echo .)com \
--cc=bitcoin-dev@lists$(echo .)linuxfoundation.org \
--cc=jason@jasondavies$(echo .)com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox