What version of openssl are you using? Current versions do not call RAND_screen or other long-term heap-walking on Windows. You absolutely *must* properly initialize the random number generator. If you fail to do that, attackers can guess the keys that you use. You will
be providing only the illusion of security. Please pass this along to that other app. What it, and you, are doing is horrible. --
Senior Architect, Akamai Technologies Member, OpenSSL Dev Team IM: richsalz@xxxxxxxxx Twitter: RichSalz |
-- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users