Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

How good is the RandomPool generator in Crypto++ library? I never heard of it before… I wonder if there is a Fortuna C implementation that I could use in an Objective-C project.

Also: How secure is SecRandomCopyBytes() (Apple's RNG)? Has anyone ever reviewed it?

share|improve this question
"This reference manual is a work in progress. Some classes are still lacking detailed descriptions." Why is it that - in general - cryptographic libs seem to be ignoring even the most basic software engineering practices... sigh. –  Maarten Bodewes - owlstead Nov 29 '13 at 14:00
It looks like RandomPool is an interface, not a full blown implementation, so there is no answering that question. You can ask how secure AutoSeededRandomPool is, but that depends directly on the operating system. In the end, for a pure library that does not do IO itself, there is no way to seed without some support of the operating system or the CPU. –  Maarten Bodewes - owlstead Nov 29 '13 at 14:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.