News for hackers. Stuff that matters.
Re:Myths about /dev/urandom (2014) by Taniwha on Sunday August 19, 2018 @04:21AM (#17793219)
I think you misunderstand my point, we're continually revealing tiny fractions of a bit of the internal state = hopefully really tiny fractions, an AES stream doesn't reveal the key, but other places reveal the direct output of the random number generator (TCP sessions are a great example, various nonces), all those tiny fractions can add up, but provided we add entropy faster than we expose all those little bits we're probably OK
Re:Myths about /dev/urandom (2014) by wolf550e on Sunday August 19, 2018 @06:50AM (#17793702)
If the output of the random number generator used in tcp sessions is aes-ctr keyed by hash of entropy pool and aes does not reveal the key, then the output of the random number generator used in tcp sessions does not reveal the entropy pool.

What you wrote is magical thinking.