Replies: 1 comment 1 reply
-
Yes, we were notified of the issue. Since then, a CSPRNG has been merged into Contiki-NG through PR #522, which had been in the queue even before the notification. There still remains some code that needs to be updated to use this CSPRNG, however. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
Thank you for the nice work on the Contiki-ng OS.
While studying some work on random number generation I noticed the Blackhat presentation of Bishop Fox from august last year, referring to Contiki-ng as not properly generating random numbers which could lead to security vulnerabilities. I was wondering if you were notified, and if any measures were taken.
kind regards,
Jorn
Beta Was this translation helpful? Give feedback.
All reactions