Weak key generation in manage_agents about ossec-hids

[atomicturtle]

Could it be better? Yes, but I dont see this as an issue in this case since we're using a hash of the value (rather than the value) that results in a 128-bit key.

[cpu]

See also #714

[g3ntry]

It's a bit frayed at the edges. It's probably more important than it used to be.

[cpu]

I dont see this as an issue in this case since we're using a hash of the value (rather than the value) that results in a 128-bit key.

You are not getting a key with 128 bits of entropy just because the digest is 128 bits. Running a weak source of entropy through a hash function does not address the underlying problem.