| |||||||||||||
True randomnessTrue randomnessPosted Mar 31, 2012 14:29 UTC (Sat) by man_ls (subscriber, #15091)In reply to: True randomness by intgr Parent article: Russell: Sources of Randomness for Userspace Sorry about the confusion, I should have refreshed these things before answering. (This goes to show how non-trivial this random number generation business is.) The original suggestion was to just encrypt /dev/zero which had all the faults described above, because it was not using an IV and key material would be leaking. Correct block cipher modes (not "stream modes" as I said) such as CRT use an initialization vector, use the result of one operation to XOR the next value, and use a counter instead of /dev/zero. All these things are done to avoid a plaintext attack. Once you take care of these issues, then you have a cryptographic PRNG system. Even so you have to pick a correct cipher to avoid a plaintext attack. And even with good ciphers apparently there are attacks based on the regularity of the input.
(Log in to post comments)
|
|||||||||||||