Comment on Hacker News

1. tptacek 6 hours ago [–]
   "MuPDF versions before 1.28.5 use an implementation of the drand48 family" yeah, ok, so they're basically not doing real encryption. The number of bits in the key space isn't the real story; the keys simply aren't cryptographically random.

   reply
2. ubutler 6 hours ago [–]
   Rule #1 of rolling your own RNG: don’t.

   Rule #2? Please don’t.

   reply
3. JonChesterfield 6 hours ago [–]
   Wonderful.

   reply
4. paulpauper 8 hours ago [–]
   it's like the weak hardware wallet entropy bug

   reply
5. jeffbee 7 hours ago [–]
   You'd have to be completely off your rocker to use a PDF tool written in C anyway.

   reply