User: Password:
Subscribe / Log in / New account

Hardware RNGs are overrated

Hardware RNGs are overrated

Posted Apr 27, 2012 6:54 UTC (Fri) by kleptog (subscriber, #1183)
In reply to: Hardware RNGs are overrated by intgr
Parent article: Quantum random numbers

A cryptographic PRNG would indeed be better than hardware generators, but to be fair we haven't actually proved that the PRNGs we're using are actually cryptographically secure. We're just really sure, though probably more sure than we are that the hardware RNGs haven't screwed up somewhere in the implementation.

Since we need to seed cryptographic PRNGs with something we should try to use something reasonably random and in that sense a hardware RNG is helpful. But I'll agree you don't need megabits of random data to produce secure output and sampling a few timing interrupts will do. Or just use /dev/urandom.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds