[JIRA] Created: (SSPCPP-391) Generation of keys for relay state is not strongly random

Scott Cantor (JIRA) noreply at shibboleth.net
Sat Sep 10 01:22:25 BST 2011


Generation of keys for relay state is not strongly random
---------------------------------------------------------

                 Key: SSPCPP-391
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-391
             Project: Shibboleth SP - C++
          Issue Type: Bug
          Components: Session Initiation
    Affects Versions: 2.4.3, 2.4.2, 2.4.1, 2.4
            Reporter: Scott Cantor
            Assignee: Scott Cantor
             Fix For: 2.5


Some of the relay state types are using weak PRNGs and causing collisions under load. It should be possible to switch them to the cryptographic source.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list