Re:Linux /dev/urandom and concurrency
by tptacek on Friday April 18, 2014 @05:55PM
(#7611545)
There is in practice no such thing as "entropy depletion". The retail side of a CSPRNG is very similar to a stream cipher. The idea behind "entropy depletion" is structurally the same as the idea of a stream cipher "depleting its key". You can run AES-CTR as a stream cipher for several exbibytes before the output starts becoming distinguishable (which is not the same thing as "reveals the key").
[ Parent
| on HN ]
Re:Linux /dev/urandom and concurrency
by raverbashing on Friday April 18, 2014 @06:49PM
(#7611735)
True, unfortunately /dev/random blocking "soon" in Linux helps to propagate this myth. I stand corrected.