3 ms·
> Is it more secure? Doesn’t seem like it. Why not? Unless all 9 "insecure" sources are 100% attacker-controlled or broken at the same time, they would still b
by wizeman 5y ago
> Is it more secure? Doesn’t seem like it.
Why not? Unless all 9 "insecure" sources are 100% attacker-controlled or broken at the same time, they would still be adding entropy.
Each additional source is adding one more hoop for the attacker to have to jump through.
The more sources are added, the less the chance that all of them are broken or attacker-controlled at the same time on the same computer.
Conversely, if you only have one (presumably good) entropy source it would be much easier for it to be compromised than if you have 10 sources, including the good one (even though some of them are easier to break than others).