3 ms·
In theory, if there is a bug found in the entropy generation used by them and everyone else (like in /dev/urandom), by mixing these in, their source of entropy
by necovek 2y ago
In theory, if there is a bug found in the entropy generation used by them and everyone else (like in /dev/urandom), by mixing these in, their source of entropy would still remain unpredictable.
Though this is certainly a pretty expensive if nice looking backup entropy source.
- tptacek 2y agoI think you'd probably have a hard time finding a cryptography engineer that agrees about this. I think in Cloudflare's case, they have the resources to "do" this "safely" (in reality, I would expect the overwhelming majority of their fleet uses conventional random number sourcing anyways), but a less-equipped team is actually more likely to harm themselves than hurt themselves trying to do it. It all nets out to "these are fine blog posts; don't try it at home".