4 ms·
The Xorshift128+ random number generator fails BigCrush
- deleted 9y ago[deleted]
- jlgaddis 9y agoIs this even a minor issue? I'm no expert but I don't think it is. Xorshift128+ isn't -- and wasn't meant to be -- a CSPRNG. It's not like anyone is gonna be using this in place of Yarrow or Fortuna, for example (or so we hope!), or using it to generate important private keys (i.e., for GPG or TLS) or anything like that.
- Uzomidy 9y agoThis has nothing to do with cryptographic security or predictability. This is about whether the output of the PRNG passes statistical tests for randomness. In a previous blog post by John D. Cook we saw that it failed the PractRand statistical test suite [1], and now we see that it also fails the older TestU01 suite, too. When Xorshift128+ and Xoroshiro128+ were launched, they were claimed to be statistically excellent. Those claims have been shown to be false. [1] https://www.johndcook.com/blog/2017/08/14/testing-rngs-with-practrand/ https://www.johndcook.com/blog/2017/08/14/testing-rngs-with-...
- nkurz 9y agoThe somewhat pointed and picky "tone" of Daniel's blog post might be clearer if one looks at the comments from Vigna (the author of Xorshift128+) on one of his other recent posts: https://lemire.me/blog/2017/08/22/cracking-random-number-generators-xoroshiro128/ https://lemire.me/blog/2017/08/22/cracking-random-number-gen... Compare that to the exchange Daniel has with O'Neill (author of the competing PCG random number generator) in another recent post: https://lemire.me/blog/2017/08/22/testing-non-cryptographic-random-number-generators-my-results/ https://lemire.me/blog/2017/08/22/testing-non-cryptographic-...
- LazyEvaluator 9y agoCan you explain what you mean?
- tapirl 9y agoso this: https://github.com/golang/go/issues/21806 https://github.com/golang/go/issues/21806 ?