6 ms·

Windows does that, persists a seed in the registry, but it's not enough. Imagine a virtual machine snapshot that you start multiple times. The separate runs wo

• cratermoon 3y ago
  Very useful for certain kinds of testing, though.
• Asmod4n 3y ago
  Doesn’t matter, it just feeds more entropy during boot. Even when it’s the same on all pcs on the planet the output wouldn’t be in a degraded state. When you are dealing with an attacker which can feed your PRNG non stop with their own entropy you have other issues to deal with.
  • Aachen 3y ago
    With that reasoning, one doesn't need an initial randomness file to begin with. Either you think there's plenty of usable entropy soon enough after power on that values can't be predicted, or you think there isn't and we need to keep a file to initialise from > an attacker which can feed your PRNG non stop with their own entropy Is not needed if you know the initial state from the file (which was present in the image file an attacker got their hands on, for example): knowing a sufficient percentage of outputs (such as the tcp seq/ack number (I forget which one the server generates) when you send a decent rate of syn packets) lets you verify which entropy addition would have lead to that output being generated. That's a handful of bits to brute force at each step unless the entropy additions are processed in prohibitively large batches (say, ≥80 bits at a time) which means you start completely predictable until that entropy is accrued (which may or may not be an issue depending on circumstances)