3 ms·
How are you ensuring a US-manufactured HWRNG produces random numbers -- i.e. how are you ensuring the NSA doesn't put HW implants to your devices as they're bei
by maqp 6y ago
How are you ensuring a US-manufactured HWRNG produces random numbers -- i.e. how are you ensuring the NSA doesn't put HW implants to your devices as they're being delivered to your customers?
https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...
- ljlolel 6y agooh man, that's rough. Would need to get a US-made HWRNG, and a China HWRNG, and hope at least one isn't compromised??? How would you recommend we get random numbers?
- maqp 6y agoThe most practical is to drop the information theoretical promises and use e.g. Linux kernel's GETRANDOM syscall. Or you can outsource the HWRNG building for users who can create it from COTS parts, e.g. http://holdenc.altervista.org/avalanche/ http://holdenc.altervista.org/avalanche/ has diagrams for the circuit.