3 ms·
Yes, but you have eliminated one vector of attack - a faulty or compromised RNG. > Is it more likely that the RNG is compromised than the bitcoin software? 1)
by imaginenore 11y ago
Yes, but you have eliminated one vector of attack - a faulty or compromised RNG.
> Is it more likely that the RNG is compromised than the bitcoin software?
1) That's a weird question. It's not like they are mutually exclusive. Both are possible. Dice allows you to eliminate the RNG problems.
2) http://en.wikipedia.org/wiki/Random_number_generator_attack#Prominent_examples http://en.wikipedia.org/wiki/Random_number_generator_attack#...
- Dylan16807 11y agoIf I think the risk is high enough to worry about, I'm going to use a method that gets close to eliminating it. I'm not going to settle for only removing one vector.
- imaginenore 11y agoSo don't. Using an airgapped computer will not save you against against a compromised RNG (e.g. reduced entropy). Your computer-generated numbers might look random to you, but you can't really be sure.
- Dylan16807 11y ago>So don't. Isn't that my argument? Maybe I should try again to clarify my position. 'Just' an airgapped computer solves neither backdoored RNG nor backdoored bitcoin software. A trusted airgapped computer comes close to solving both. Using dice only gives me half a solution; why bother?
- imaginenore 11y agoAirgapped computer definitely solves the compromised software/firmware problem, because it can't send your private keys to the attacker.
- Dylan16807 11y agoCompromised software can do anything a compromised RNG can do and more. Especially with something finicky like asymmetric crypto.