Security Advisory 2019-06-13 – Reduced initial randomness on FIPS keys (yubico.com) 4 points by digitalnalogika 7y ago ↗ HN
[–] londons_explore 7y ago ↗ Rather worrying for a device whose entire purpose is to generate and store keys...Also especially worrying considering a deliberately 'bad' random number generator is almost the perfect way to subvert a device, since true random is inprovable [–] andbberger 7y ago ↗ meh this specifically pertains to the 2-factor feature, and if your 2nd factor is a secret you have gone very somewhere.
[–] andbberger 7y ago ↗ meh this specifically pertains to the 2-factor feature, and if your 2nd factor is a secret you have gone very somewhere.
2 comments
[ 3.5 ms ] story [ 17.8 ms ] threadAlso especially worrying considering a deliberately 'bad' random number generator is almost the perfect way to subvert a device, since true random is inprovable