4 ms·
Why not use a hardware rng in that case? Seems a lot safer if you have to deal with litigious people.
by Thiez 10y ago
Why not use a hardware rng in that case? Seems a lot safer if you have to deal with litigious people.
- sibrahim 10y agoWe did, in a way. One of the sources used was random.org (uses radio receivers tuned to static from atmospheric noise: hardware RNG as a service). I also had less than 3 weeks to take it from proposal to production. Combining two independent sources obtained by different people and using a cryptographic commitment scheme ensured that 1) no one person could fix the results or make it nonrandom (protection against Eddie Tipton-style attacks), 2) if at least one of the independent sources was random, the result would be.