News for hackers. Stuff that matters.

A comment on Cryptographically and Constantly Changing Port Opening.

Re:Cryptographically and Constantly Changing Port Opening by Tichy on Tuesday November 13, 2007 @07:09PM (#79587)
"Both bits of software hash this secret with the current UTC time in minutes (using SHA256) to get 256 bits of random data."

Not random...

[ Parent | on HN ]
Re:Cryptographically and Constantly Changing Port Opening by jgrahamc on Wednesday November 14, 2007 @01:23AM (#79671)
Agreed. A hash could be a good CPRNG, but if I want to claim randomness I probably should use a cipher with an incrementing input.

John.

[ Parent | on HN ]