[tor-bugs] #17687 [Tor]: crypto_strongest_rand() failures should be fatal(?)
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Nov 25 16:15:13 UTC 2015
#17687: crypto_strongest_rand() failures should be fatal(?)
-----------------------------+--------------------------------
Reporter: yawning | Owner: yawning
Type: enhancement | Status: new
Priority: Medium | Milestone: Tor: 0.2.8.x-final
Component: Tor | Version: Tor: unspecified
Severity: Normal | Keywords: crypto tor-core
Actual Points: | Parent ID:
Points: | Sponsor:
-----------------------------+--------------------------------
Follow up from #17686.
We either trust OpenSSL's `RAND_bytes()`, or we don't. The existence/use
of the call hints at the latter, so failing `crypto_strongest_rand()`
should be fatal especially when doing Ed25519/Curve25519 key generation.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17687>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list