4 ms·
> Only by examining a long sequence of its results could one gain any confidence that it isn't backdoored Actually, you can't. A properly backdoored RNG is i
by agwa 13y ago
> Only by examining a long sequence of its results could one gain any confidence that it isn't backdoored
Actually, you can't. A properly backdoored RNG is indistinguishable from a non-backdoored RNG. Imagine a backdoored RNG that is simply a counter encrypted with AES. The output looks completely random, but it can be completely broken by the holder of the AES key.
- ScottBurson 13y agoI see. That is certainly a problem as far as our ability to ever come to trust RDRAND. But it supports the point I was making: trusting RDRAND is a very different thing from trusting the rest of the instruction set.