Subject: Re: CERT Advisory / Statistical Weaknesses in TCP/IP Initial Sequence
To: David Brownlee <abs@formula1.com>
From: Jason R Thorpe <thorpej@zembu.com>
List: tech-security
Date: 05/03/2001 08:50:21
On Thu, May 03, 2001 at 11:34:52AM +0100, David Brownlee wrote:
> Cert has an advisory which does not mention NetBSD at all:
> http://www.cert.org/advisories/CA-2001-09.html
>
> The best values came from OpenBSD:
> "The OpenBSD TCP/IP sequence number generator has recently
> been rewritten by Niels Provos. New code is available, but
> had not been included in any official release as of this
> writing. According to Theo de Raadt, the code was finished
> in December, and is supposed to be shipped with OpenBSD
> 2.9 in late May."
>
> Has anyone looked at the OpenBSD code?
Looked at it -- could be interesting, but I'd want to get some other
opinions on it, first.
--
-- Jason R. Thorpe <thorpej@zembu.com>