Search Result

[Jakobson]

It's a compiler option. And yes, testing and trying to break things is essential part of security. It is just one tool more to toolbox....

[Jakobson]

"Use the EOR3 instruction to implement xor_blocks() if the instruction is available, which is the case if the CPU implements the SHA-3 extension...

[Jakobson]

The fastness of a random hash function of kernel LRNG is indifferent. The quality of entropy sources and mixing them is much much more important. Kernel...

[Jakobson]

There are IPv6 benchmarks also. Just read the whole cover letter of patch series....

[Jakobson]

FIPS-mode Kconfig option is disable by default. It has been disable all the time so far and will be disabled by default also later. I do not understand...

[Jakobson]

FIPS 140-2 is already outdated (FIPS 140-2 testing was available until September 21, 2021). Therefore FIPS 140-3 became mandatory since September 22,...

[Jakobson]

FIPS has been a kernel configuration option and will also be in Stephan Müller's implementation (it's disabled by default). I strongly feel there should...

[Jakobson]

The patchset must be keep updated all the time against the latest kernel version and its changes. The implementation was already ready about 20 patchset...

[Jakobson]

It's nice to see progress there to replace old scp protocol by SFTP and therefore to have a solution for this vulneralibity:
https://nvd.nist.g...

[Jakobson]

At runtime via procfs if not set on by default:
https://elixir.bootlin.com/linux/lat...pf/Kconfig#L38...

[Jakobson]

It has been all the time a kernel config flag. You can built-in or not to compile BPF/eBPF....

[Jakobson]

Reasons why the patchset is not taken are non-technical. Some administrators have totally ignored the patchset....

[Jakobson]

Encrypting compressed data is typically not good idea at all in security point of view....

[Jakobson]

Entropy sources for /dev/random will be chosen by user during compile time. However none of random sources will be not allowed crediting entropy to multiple...

[Jakobson]

Security is not easy. And not easy at all when changing almost the whole LRNG in a way that's not break anything existing. Needs also to take care of...