3 ms·
I wrote https://mjg59.user.srcf.net/entropy/ https://mjg59.user.srcf.net/entropy/ over 20 years ago, so yes, this is an entirely solved problem. (The issues as
by mjg59 5y ago
I wrote https://mjg59.user.srcf.net/entropy/ https://mjg59.user.srcf.net/entropy/ over 20 years ago, so yes, this is an entirely solved problem.
(The issues associated with seeding an RNG with data entirely controlled by a third party are left as an exercise for the reader)
- bhawks 5y agoEven assuming trust of the 3p service - establishing an ssl connection actually requires entropy too. Even more raw - how could a zero entropy client generate a nonce to protect itself against replay attacks by man in the middle? I suppose this situation works if you assume both a trusted third party service and a trusted networking layer, but all those assumptions greatly inhibit usefulness.