Hi guys, Welcome to the Advanced Video Search Engine, and you are watching Because "use urandom" isn't everything: a deep dive into CSPRNGs in Operating Systems & Programming. That video is uploaded by MCH2022 at 2017-08-12T14:26:23-07:00. We are promoting this video only for entertainment and educational purpose only. So, I hope you like & enjoy it. [Yx4RroggBzI]
| Name | Because "use urandom" isn't everything: a deep dive into CSPRNGs in Operating Systems & Programming |
| Video Uploader | Video From MCH2022 |
| Upload Date | This Video Uploaded At 12-08-2017 21:26:23 |
| Video Discription | Implementation, hazards and updates on use of RNGs in programming languages and the Linux Kernel (among others) Over the past year multiple people have been engaging language maintainers and designers to change their use of CSPRNGs (mainly relying on user-land RNGs like the one from OpenSSL, and sometimes suggesting "adding entropy" by various means from user-land daemons like haveged). In this short presentation we'll survey the struggle of cryptographers, developers and security engineers to change the path various high-profile languages have taken to provide randomness to their userbase. Affected languages include but are not limited to: Ruby, node.js and Erlang. We outline better approaches for language maintainers and implementers as well as coming changes within the Linux kernel crypto subsystem (i.e. /dev/random and /dev/urandom) w.r.t. security and performance. Recently these changes were merged into mainline Linux (4), problems with languages implementations however remain. We'll also discuss operating system provided randomness testing, attacks/mitigation in embedded and virtualized environments. #Software #Security Aaron Zauner (azet) Yx4RroggBzI |
| Category | Education |
| Tags | SHA | SHA2017 | hacking | Hacker camp | Netherlands | Scoutinglandgoed | Zeewolde |
