3 ms·
That's his point. A hardware TRNG's bit stream (plus bias filtering, if necessary) could be wired to flip-flop gates (shift registers) to output lottery number
by teacup50 11y ago
That's his point.
A hardware TRNG's bit stream (plus bias filtering, if necessary) could be wired to flip-flop gates (shift registers) to output lottery numbers, with a component count in the low hundreds at most, no software to compromise, and off-the-shelf, mostly passive commodity components.
In short, readily auditable, easily recreated. You could build the system out of parts ordered from multiple manufacturers/OEMs in front of multiple auditors, seal it in place, and never touch it again. You could inspect (destructively and non-destructively) the components directly to verify their implementation.
However, we live in a world where the TSA pays hundreds of thousands of dollars for an application that flips a coin, so the fact that state lotteries are using complete operating systems on a standard PC should be unsurprising.
- coldtea 11y ago>In short, readily auditable, easily recreated. You could build the system out of parts ordered from multiple manufacturers/OEMs in front of multiple auditors, seal it in place, and never touch it again. Apparently if "never touch it again" was an option, this wouldn't have happened either. This guy had physical access to the machine. And since that's the case, the hardware you mention wouldn't have helped either.
- teacup50 11y agoIt would have been far, far, far, far more difficult to do, and far more difficult to hide. That's the entire point.