Isn't this the same category of bug that led to the Sony master key leak? Amusin... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Splines on Jan 18, 2011 \| parent \| context \| favorite \| on: Tarsnap critical security bug Isn't this the same category of bug that led to the Sony master key leak? Amusing, if so.

tptacek on Jan 18, 2011 [–]

Sort of but not really. Apart from the fact that Sony broke DSA (a wildly different crypto primitive than AES-CTR), the mistake Sony made was more fundamental to the design. I think you're right to notice that in both cases a nonce wasn't actually a nonce.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact