oss-sec mailing list archives

Re: RESEND: CVE Request: pwgen

From: Michael Samuel <mik () miknet net>
Date: Wed, 23 Oct 2013 10:39:43 +1100

On 23 October 2013 08:50, Solar Designer <solar () openwall com> wrote:

Michael, is the above correct?  If so, should Kurt reject CVE-2013-4443?
I think so.


Yes, that was correct - if you generated 1 extremely long password
(rather than a ton of passwords) and made a histogram, there would be
no bias.