4 ms·
Thanks for saying it's brilliant :) Yes, entropy and true randomness will be an issue. I can imagine manufacturing a Magic Wand (all in the US) which would be
by ljlolel 6y ago
Thanks for saying it's brilliant :)
Yes, entropy and true randomness will be an issue. I can imagine manufacturing a Magic Wand (all in the US) which would be a custom piece of HW with an entropy chip (maybe using cosmic rays?)
Yes you're right and I mention that in the Usability section.
- maqp 6y agoHow are you ensuring a US-manufactured HWRNG produces random numbers -- i.e. how are you ensuring the NSA doesn't put HW implants to your devices as they're being delivered to your customers? https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...
- ljlolel 6y agooh man, that's rough. Would need to get a US-made HWRNG, and a China HWRNG, and hope at least one isn't compromised??? How would you recommend we get random numbers?
- maqp 6y agoThe most practical is to drop the information theoretical promises and use e.g. Linux kernel's GETRANDOM syscall. Or you can outsource the HWRNG building for users who can create it from COTS parts, e.g. http://holdenc.altervista.org/avalanche/ http://holdenc.altervista.org/avalanche/ has diagrams for the circuit.