[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: PasswordSafe 3.0 weak random number generator allows key recovery attack
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: PasswordSafe 3.0 weak random number generator allows key recovery attack
- From: ronys@xxxxxxxxxxxx
- Date: 24 Mar 2006 07:03:30 -0000
Hi,
- As has been pointed out, this is a BETA release, so it's a bit, er, inelegant
to describe this as a flaw in 3.0. Guess I'll have to bump the release number
when we fix this...
- At least this is an implementation flaw, as opposed to the format design flaw
that the good folks at ElcomSoft found last time...
Cheers,
Rony