> If you are going to use random pids to help prevent crackers from
> guessing the next pid, then the method used to generate the random
> numbers needs to be cryptographically secure. From what I
> understand, this is pretty non-trivial (see: Yarrow at
> http://www.counterpane.com/).
Yes and no. It's non-trivial but it's in kernel anyway (there are exist
pool for /dev/random and it's very close to be "true cryptographically
secure"). Even if it's not "cryptographically secure" now it'll be fixed
when some problems will be discowered (it's used by GPG and thus it SHOULD
be secure!).
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/