The Patching Friars' AlmanacA calendar of CVE saints

Patron of September 17

Netscape SSLHoly card for netscape-ssl-prng, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 N Netscape SSL FORTUNA NON CASUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Netscape of Chance, Father of the Church

Patron of random number generators, system clocks, and anyone who thinks the time of day is a secret.

Life

On the evening of 17 September 1995 Ian Goldberg and David Wagner, graduate students at Berkeley, announced that they had broken Netscape Navigator's SSL. Its encryption keys grew from a seed made of the time of day and process numbers, values that were easy to guess: a "secure" session could be decrypted in minutes, sometimes in under one. Netscape fixed it quickly and the web learned its first lesson: cryptography is only as good as the randomness that feeds it.

Prayer

O Saint Netscape of Chance, who read the clock to invent secrets, grant us true entropy and seeds no one can guess. Amen.

How to celebrate

Celebrated by using the operating system's cryptographic generator and never, for any reason, the clock as a seed.

Sow seeds from the clock, and thieves reap the crop.

Technical record

Disclosed on
September 17 1995
CVE
No CVE: blessed, not yet canonized by MITRE

Ian Goldberg and David Wagner announced 'Netscape SSL implementation cracked!' on Sunday evening, 17 September 1995 (PDT; 18 Sep UTC). Netscape seeded its key generator with the time of day and process IDs, so the SSL key could be found in under a minute.

Sources: people.eecs.berkeley.edu · en.wikipedia.org

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.