News for hackers. Stuff that matters.
Re:Ruby Bug: SecureRandom should try /dev/urandom first by sibrahim on Wednesday May 04, 2016 @09:49AM (#11628300)
We did, in a way. One of the sources used was random.org (uses radio receivers tuned to static from atmospheric noise: hardware RNG as a service). I also had less than 3 weeks to take it from proposal to production.

Combining two independent sources obtained by different people and using a cryptographic commitment scheme ensured that 1) no one person could fix the results or make it nonrandom (protection against Eddie Tipton-style attacks), 2) if at least one of the independent sources was random, the result would be.

There are no comments on this comment yet.