[tbb-bugs] #17244 [Tor Browser]: Low entropy PRNG usage in Tor Browser?
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Oct 6 14:33:17 UTC 2015
#17244: Low entropy PRNG usage in Tor Browser?
-------------------------+-------------------------------------------------
Reporter: | Owner: tbb-team
arthuredelstein | Status: new
Type: defect | Milestone:
Priority: normal | Version:
Component: Tor | Keywords: tbb-linkability,
Browser | TorBrowserTeam201510
Resolution: | Parent ID:
Actual Points: | Sponsor:
Points: |
-------------------------+-------------------------------------------------
Comment (by yawning):
https://bugzilla.mozilla.org/show_bug.cgi?id=322529 has a long rambling
discussion on this, and no patch.
To alleviate tracking concerns the seed needs to be changed. To make the
world a better place, the algorithm could be replaced with something
sensible as well (Just replacing the algorithm is insufficient to prevent
the bad guys from making an educated guess about the clock, even if the
algorithm has backtracking resistance).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17244#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list