3 ms·
After an initial seeding the only thing additional entropy adds is limiting the damage from a compromise of the internal state of the PRNG. And if the OS's inte
by bradleyjg 9y ago
After an initial seeding the only thing additional entropy adds is limiting the damage from a compromise of the internal state of the PRNG. And if the OS's internal PRNG state is compromised, what makes you think your process isn't?
- DiThi 9y agoWhat if you're using several PRNGs XORed together and reseeded frequently?
- bradleyjg 9y agoWhy would you want to do that?
- DiThi 9y agoThat would make much more difficult (if not impossible) to guess the internal state of all RNGs.
- bradleyjg 9y agoYou can't guess the internal state of a CSPRNG based on the output. That's what makes it CS. The only way to get the internal state is to break the OS protection and look at the memory directly. And if the attacker can do that, then they can do it for the multiple PRNG version too.
- DiThi 9y agoI misunderstood the context in your replies. We were kind of talking about different topics.