Lowering entropy
Lowering entropy
Posted May 13, 2015 19:25 UTC (Wed) by dlang (guest, #313)In reply to: Lowering entropy by DigitalBrains
Parent article: Random numbers from CPU execution time jitter
> If I need 128 shannons of entropy for my crypto, I will not get there with 96 shannons and something deterministic mixed in.
how do you decide that you need "128 shannons of entropy for my crypto"?
and even if you only have 96 shannons of entropy, unless the attacker knows/controls the deterministic data that was mixed in, it's still effectively random as far as the attacker is concerned. This only becomes a problem when the deterministic factor can be known by the attacker, and even different amounts of deterministic data will result in different output.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.