Bugtraq mailing list archives

Re: Re: Comments re ISC's announcement on bind9 security


From: ntn () networkontap com
Date: 1 Nov 2007 19:14:06 -0000

Given the extremely small amount of space for randomization (16-bit query ID's) does a cryptographically strong PRNG 
really make difference? Aside from stopping an easy prediction, doesn't it just generate a little extra work for a 
determined malicious individual?

Seems to be a moot point to me---whether the PRNG is  cryptographically weak or not because of the small sequence 
number space.

-ntn


Current thread: