Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		www.isc.org The Crypto Library Disaster - ISC
\|	\|	sashadu.wordpress.com Secure Development, long story short \| SashaDu on Software Development	4.7 parsecs away Travel
\|	\|	Lets assume you develop software product or project. At some point your customer will ask you - what about security? How can we be sure your product is secure? Do you follow some best practices or guidelines? Are you certified? In order to provide satisfying answer to these questions, you should implement what is called...	4.7 parsecs away Travel
\|	\|	rdist.root.org Smart meter crypto flaw worse than thought - rdist	3.8 parsecs away Travel
\|	\|	Travis Goodspeed has continued finding flaws in TI microcontrollers, branching out from the MSP430 to ZigBee radio chipsets. A few days ago, he posted a flaw in the random number generator. Why is this important? Because the MSP430 and ZigBee are found in many wireless sensor systems, including most Smart Meters. Travis describes two flaws:...	3.8 parsecs away Travel
\|	\|	jens.mooseyard.com The Fine Line Between Clever And Stupid [Thought Palace]	8.1 parsecs away Travel
\|	\|	Jens Alfke's Weblog	8.1 parsecs away Travel
\|	\|	negativesign.com Guilt by Association - negativesign	22.3 parsecs away Travel
\|		This one hits close to home. I can't imagine how the NIST staff involved in creating SP 800 (and more specifically, the SP 800-90A Dual Elliptic Curve Deterministic Random Bit Generation...bit) must feel. First of all, given the definition of a deterministic system, the title itself gives me pause. Maybe there's some next-level random number theory described in the standard, but I'm not sure I'd ever want a random number generator to exhibit deterministic behavior.	22.3 parsecs away Travel