3 ms·
Because instead of just trusting your system, you'd also have to trust an external service to remain honest. CSPRNG is widely deemed acceptable for use as key m
by quantum5 6y ago
Because instead of just trusting your system, you'd also have to trust an external service to remain honest. CSPRNG is widely deemed acceptable for use as key material (unlike standard PRNGs), so there is no reason to add an external dependency.
- atoponce 6y agoFurther, sufficiently seeded cryptographically secure RNGs are indistinguishable from true random white noise, so from a practical perspective, there is no point to require "true random".
- perl4ever 6y agoThat seems like a false dichotomy to me unless I were to truly understand the PRNG.