3 ms·
Well, those lava lamps are cool looking, but that's about their only value. A 256-bit seed is enough to generate all the random bytes you'll ever want: just use
by loup-vaillant 6y ago
Well, those lava lamps are cool looking, but that's about their only value. A 256-bit seed is enough to generate all the random bytes you'll ever want: just use Chacha20 with fast key erasure, and you're done. (Fast key erasure crash course: start with an encryption key and a stream cipher. Encrypt 512 bytes worth of zeroes. The first 32 bytes of the ciphertext are your new key. The rest can feed /dev/urandom. Once a byte is served, erase it. Once you run out of bytes, generate 512 more bytes. New generators can be forked off by simply requesting 32 random bytes.)
From https://blog.cr.yp.to/20140205-entropy.html https://blog.cr.yp.to/20140205-entropy.html
how can anyone simultaneously believe that:
- we can't figure out how to deterministically expand one
256-bit secret into an endless stream of unpredictable
keys (this is what we need from urandom), but
- we _can_ figure out how to use a single key to safely
encrypt many messages (this is what we need from SSL,
PGP, etc.)?
I don't. Those lava lamps are cool looking, but that's about their only value. We don't need that many random bits.