4 ms·
Wait, so do I misunderstand what Makoto Matsumoto is saying, or is he wrong?
by paulbaumgart 17y ago
Wait, so do I misunderstand what Makoto Matsumoto is saying, or is he wrong?
- tptacek 17y agoI don't think he's wrong, but I think you may be following his logic and overshooting the right conclusion; he's saying it's possible to use MT as a component of a CSPRNG, not that MT itself can become a CSPRNG. A good place to get your bearings on this is Kelsey et al's "Yarrow" paper. My (unqualified) opinion is that the Yarrow CPSRNG is awkward, but the paper is a good survey on what design tactics go into a modern CSPRNG --- in particular, entropy collection and refreshing, both of which PHP's MT lack.