[qca] [Bug 499453] QCA seeds the OpenSSL RNG with low-entropy input

Wolfgang Frisch bugzilla_noreply at kde.org
Tue Feb 11 14:14:35 GMT 2025


https://bugs.kde.org/show_bug.cgi?id=499453

--- Comment #2 from Wolfgang Frisch <wolfgang.frisch at suse.com> ---
(In reply to Albert Astals Cid from comment #1)
> We are in the slow process of phasing out QCA, so unless there is a real
> real real problem we're not going to touch it much/make new releases
> 
> https://invent.kde.org/libraries/qca/-/issues/18

Thanks for the clarification. In that case it doesn't make much sense to pursue
this further, since OpenSSL mitigates the problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Unassigned-bugs mailing list