devsummit:201309:security

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
devsummit:201309:security [2013/09/28 06:09] – DagErlingSmørgravdevsummit:201309:security [2021/04/25 10:00] (current) – Move to DevSummit namespace. JethroNederhof
Line 31: Line 31:
 Embedded systems will probably pre-generate keys.  Some have very few devices. Embedded systems will probably pre-generate keys.  Some have very few devices.
  
-Edward Snowdon -- v. high probability of backdoors in some (HW) RNGs.  Including elliptic curve generator included in NIST.+Edward Snowden -- v. high probability of backdoors in some (HW) RNGs.  Including elliptic curve generator included in NIST.
 rdrand in ivbridge not implemented by Intel... rdrand in ivbridge not implemented by Intel...
 Cannot trust HW RNGs to provide good entropy directly.  (rdrand implemented in microcode.  Intel will add opcode to go directly to HW) Cannot trust HW RNGs to provide good entropy directly.  (rdrand implemented in microcode.  Intel will add opcode to go directly to HW)
Line 127: Line 127:
 defining CPE_VENDOR and derive other parts from PORTNAME etc.  Similarly to MASTERSITES defining CPE_VENDOR and derive other parts from PORTNAME etc.  Similarly to MASTERSITES
  
-(With staging for eg. an [[/SourceForge|SourceForge]] port need almost no more than to set the port name and that it needs autotools and review the+(With staging for eg. an %%SourceForge%% port need almost no more than to set the port name and that it needs autotools and review the
 generated plist) generated plist)
  
Line 188: Line 188:
  
 Colin Percival -- "It's mostly things I meant to do in the past 5 years but never got around to" Colin Percival -- "It's mostly things I meant to do in the past 5 years but never got around to"
 +
 +----
 +
 +{{tag>Historical}}
  
  • devsummit/201309/security.1380348544.txt.gz
  • Last modified: 2013/09/28 06:09
  • by DagErlingSmørgrav