3 ms·
Sufficiently adversarial rdrand could snoop the rest of your seed and choose its result appropriately. But sha256 is not reversible.
by moonchild 4y ago
Sufficiently adversarial rdrand could snoop the rest of your seed and choose its result appropriately. But sha256 is not reversible.
- dragontamer 4y agoA sufficiently adversarial CPU could detect the sha256 hash you're using as a random number generator (and no other sha256 hash) and set its result to a known value as well. At some point, you gotta just trust the hardware.