2 ms·
> Basically what /dev/random does in Linux: they still use the potentially tainted 'coins' despite having a CSPRNG. Yes, this is well known. Any reseeding of t
by goodpoint 5y ago
> Basically what /dev/random does in Linux: they still use the potentially tainted 'coins' despite having a CSPRNG.
Yes, this is well known. Any reseeding of the CSPRNG is good if you steer it in with XOR.
- eru 5y agoMostly, but not completely. If your adversary knows your secret state, they can tailor their to-be-XOR-ed data to steer your state wherever they want to. The threat model where this is realistic is when your adversary built your hardware random number generator that you use to add entropy to your pool. (And that's assuming that this piece of hardware can see the other entropy sources that go into your pool, but can not directly exfiltrate that information into the outside world.)