SSHClient Connect Failed - Randomize

Discussion of open issues, suggestions and bugs regarding network security and data protection solution - SecureBridge
Post Reply
MRoth
Posts: 14
Joined: Thu 30 Sep 2021 01:06

SSHClient Connect Failed - Randomize

Post by MRoth » Mon 18 Oct 2021 01:26

Hello,

As you can see from our previous posts we are having trouble connecting to our test SSHServer. After looking over the SSHClient demo again we see that randomization maybe our problem.

How does the Silent Randomization work. The code will only perform the mouse move randomization if the checkbox is unchecked otherwise it doesn't seem to do anything. Is this correct, if not can you please explain how it does the silent randomization.

Also, can please show us how to use the randomization in Delphi in a service application.

Thanks for all your help.

YanishevskiyVI
Devart Team
Posts: 70
Joined: Wed 02 Jun 2021 09:30

Re: SSHClient Connect Failed - Randomize

Post by YanishevskiyVI » Thu 21 Oct 2021 13:22

Hi!

Thank you for contacting Devart!

Please be informed, that the randomization is used to prevent of random seed fitting vulnerability.
In the Demo, random data is collecting from a mouse movement. Mouse movements are suggested to be a random enough to prevent random seed fitting instead of timers, which create a theoretically predictable seed.
In other case, "silent" randomization means system counter is used to create a random seed.
An example Demo is given to demonstrate the capabilities of SecureBridge. In fact, you are free to use any random data with Randomize method.

Code: Select all

https://www.devart.com/sbridge/docs/index.html?tscrandom_randomize.htm

So, you can leave no initial random seed, then SåcureBridge will use the system counter data by default.

In your case, this will be the best option.

Please, let us know if you have any questions!

Post Reply