3 ms·
> Wow did you really look at that page and say, "This is going to be easier and more secure than using /dev/urandom?". Reading the rest of the info on the page,
by pawadu 10y ago
> Wow did you really look at that page and say, "This is going to be easier and more secure than using /dev/urandom?". Reading the rest of the info on the page, http://www.protego.se/trnsup.htm http://www.protego.se/trnsup.htm, does not give me a lot of confidence in the product. The explanation page of how it works is just a bunch of scare info against using a software solution.
While the page doesn't look as cool as your average SV hardware startup, and their white paper is more or less blank, don't dismiss them that easily. According to linkedin the guy beyond the company has been involved in ASIC TRNG designs at some large companies.
Also, from what I have heard there are multiple open source hardware entropy generator designs that together with minimal software processing can generate pretty good random. Now, this is not NSA-proof randomness but probably better than anything you can get from /dev/random and more than enough for, say, gift cards.
- koolba 10y ago> While the page doesn't look as cool as your average SV hardware startup, and their white paper is more or less blank, don't dismiss them that easily. According to linkedin the guy beyond the company has been involved in ASIC TRNG designs at some large companies. It doesn't take much to look "professional" and having HTTPS on a page that is meant to sell a security product is table stakes. > Now, this is not NSA-proof randomness but probably better than anything you can get from /dev/random and more than enough for, say, gift cards. I disagree. Not being able to vet how it works or seeing the code running on the chip is not better than /dev/urandom. The latter is "more than enough, for, say, gift cards". Heck if it's good enough for SSH and GPG keys, it better be good enough for gift cards!
- pawadu 10y agoFair enough, their 1990-esque site needs HTTPS and a make over. Anyway, now I am tempted to buy one and reverse engineer it...