Page 1 of 1

SSHClient Connect Failed - Randomize

Posted: Mon 18 Oct 2021 01:26
by MRoth
Hello,

As you can see from our previous posts we are having trouble connecting to our test SSHServer. After looking over the SSHClient demo again we see that randomization maybe our problem.

How does the Silent Randomization work. The code will only perform the mouse move randomization if the checkbox is unchecked otherwise it doesn't seem to do anything. Is this correct, if not can you please explain how it does the silent randomization.

Also, can please show us how to use the randomization in Delphi in a service application.

Thanks for all your help.

Re: SSHClient Connect Failed - Randomize

Posted: Thu 21 Oct 2021 13:22
by YanishevskiyVI
Hi!

Thank you for contacting Devart!

Please be informed, that the randomization is used to prevent of random seed fitting vulnerability.
In the Demo, random data is collecting from a mouse movement. Mouse movements are suggested to be a random enough to prevent random seed fitting instead of timers, which create a theoretically predictable seed.
In other case, "silent" randomization means system counter is used to create a random seed.
An example Demo is given to demonstrate the capabilities of SecureBridge. In fact, you are free to use any random data with Randomize method.

Code: Select all

https://www.devart.com/sbridge/docs/index.html?tscrandom_randomize.htm

So, you can leave no initial random seed, then SÃ¥cureBridge will use the system counter data by default.

In your case, this will be the best option.

Please, let us know if you have any questions!