3 ms·
Probably using ANY commercial encryption tech, you're doomed. But it is naive to generate the key for a one-time pad using a PSEUDO random number generator! T
by jll29 2y ago
Probably using ANY commercial encryption tech, you're doomed.
But it is naive to generate the key for a one-time pad using a PSEUDO random number generator!
The whole point of the one-time pad is to achieve true security because you can use truly random keys. The kind of key that used here could have been created locally by just exchanging the seed, which would have prevented putting all these stewardesses in danger ;-).
I understand the developer was self-taught (and "learn as you go" on top), so it's understandable, but whoever reads this and has truly important secrets, don't be that silly.
Having said this it is no easy to generate truly random numbers in large quantities. Again, you will need to build yourself your own hardware device, because most likely, all commercially available gear is rigged.
- nullc 2y ago> But it is naive to generate the key for a one-time pad using a PSEUDO random number generator! which is what every stream cipher is, ... and indeed, they do suffer the expected failure modes from key reuse, etc. Doesn't stop them from being a popular best practice. :)