4 ms·
It depends on what you are talking about, sometimes you want a slow protocol, since it makes bruteforcing the original value more complicated. I can't wrap my
by Guvante 13y ago
It depends on what you are talking about, sometimes you want a slow protocol, since it makes bruteforcing the original value more complicated.
I can't wrap my head around why that would matter for a PRNG, but it sometimes does have value.
- ogreyonder 13y agoAnd that's exactly what had everyone else scratching their heads, too! There are plenty of slow random number generators. They're easily built from cryptographic hash functions [1]. Heck, use something like Bcrypt as your hash and you can get as many seconds per number as you like. The reason we don't use them even though they work perfectly well is that they are too slow. The challenge is making a fast PRNG that can maintains the properties of cryptographic randomness. That's why everyone was so confused with dual EC. [1] http://en.wikipedia.org/wiki/Cryptographic_hash_function#Use_in_building_other_cryptographic_primitives http://en.wikipedia.org/wiki/Cryptographic_hash_function#Use...