4 ms·
This is cool and an awesome tech demo and probably a great recruting technique, but... Is it actually practically/meaningfully more "Secure" than the standard
by deanCommie 3y ago
This is cool and an awesome tech demo and probably a great recruting technique, but...
Is it actually practically/meaningfully more "Secure" than the standard PseudoRandom approaches that everyone relies on today?
Short of "Nation States sharing secrets of alien technology", is this actually significant to any customer's practical applications?
- new23d 3y agoNo.
- lukevalenta 3y agoThe piece that helps security-wise is that we're mixing in entropy from a trusted external source, so not solely relying on the local random number generation from a machine in a data center somewhere. Is it likely that local random number generation would be compromised? No. But it does give us a little extra peace of mind.
- pclmulqdq 3y agoThis is more of a defense in depth for the paranoid, but cryptographic PRNGs (and even hardware RNGs) can be compromised in ways that are not easy to find. Since they generate your keys, a compromise of the RNG chain is very valuable for a threat actor.
- deanCommie 3y agoSo, no.