Re: [tinydtls-dev] Secure Version of dtls_prng()

[Olaf Bergmann <bergmann@xxxxxxx>]

Hi Frank,

Frank Gerlach <Frank_Gerlach@xxxxxxxx> writes:

> I will perform the code submission as you specified as soon as I have
> changed the code to use AES.

Great, thanks!

> My post was meant to give other tinydtls users an idea what they must
> do if they want to use it in production.

I see your comments as very useful input especially because many
security issues out there attribute to low entropy.

> I also read your comment at dtls_prng() and maybe you could make the
> comment somewhat stronger (e.g. "do not use this code in production").

Agreed.

Grüße
Olaf