Re:NeuG USB True Random Number Generator
by tptacek on Friday January 05, 2018 @03:21PM
(#16081333)
I'm abusing the term, I know. But the idea is simple, right? Even a minuscule update to the kernel entropy pool makes a previously compromised state unusable. So you don't want your CSPRNG to just be a bit generator, like HMAC or CTR.
(Zvi Gutterman refers to the property I'm talking about as "backwards security", so my abuse of the term is particularly egregious).
(Zvi Gutterman refers to the property I'm talking about as "backwards security", so my abuse of the term is particularly egregious).