Re:Milk Sad: Weak Entropy in libbitcoin (bc) seed generation
by ryanatdistrust on Tuesday August 08, 2023 @05:13PM
(#37055540)
The difference between 32 bits and 64 bits is the amount of people on Earth compared to (EDIT) the amount of grains of sand on Earth. 32 bits is nothing when it comes to entropy, and it can take a security researcher (like us) only $100 to rent a machine to completely brute force it. Nowadays, only values less than 128 or 256 bits (which are exponentially bigger) are seen as appropriate.
[ Parent
| on HN ]
Re:Milk Sad: Weak Entropy in libbitcoin (bc) seed generation
by comboy on Tuesday August 08, 2023 @08:46PM
(#37057399)
You mean time is the only source of entropy there? I don't think number of bits would even matter for it to be bad in such case.
Re:Milk Sad: Weak Entropy in libbitcoin (bc) seed generation
by ryanatdistrust on Wednesday August 09, 2023 @08:20AM
(#37061544)
That is correct, time is the only entropy for the command, and the function they use to generate random numbers is also flawed in that it can only produce 2^32 possible outputs.