News for hackers. Stuff that matters.
Re:OnlyKey: Open-Source Alternative to YubiKey by jstanley on Friday December 27, 2019 @02:35AM (#21889797)
Your "delay 0-6 ms" only delays 0-4 ms.

Not to mention the fact that the only obvious effect of that delay is to expose entropy information to timing analysis.

Re:OnlyKey: Open-Source Alternative to YubiKey by cr7pt0 on Friday December 27, 2019 @07:13AM (#21890890)
The delay is 0-2 + 0-2 so yes combining six possible values for a possible delay up to 4ms. The delay inside of an RNG loop obviously does not expose entropy to timing analysis, it does the opposite. As the loop has a small random delay interval the RNG seeds are never predictably read in, adding to the effectiveness of the unpredictability of the RNG which is a good thing.