Tag Info

New answers tagged

0

Adding the source and length actually collects more entropy. Consider the case of using system counters as entropy sources. If at some timestamp CounterX=123, and CounterY=123, we actually retain at least one bit more entropy by stirring in a source identifier ("CounterX=123CounterY=123") instead of simply "123123". The source of the value is additional ...


0

You can't contaminate the pool with low entropy data. Hash functions "extract" up to the output size or the hash - slightly less, because of collisions. The source number makes the output different for different sorces even if the input is the same. The length is needed because else we could not differate two small inputs from one large input with special ...


1

No OFB_DRBG isn't directly vulnerable to attacks. However from a theoretical standpoint there is one point speaking against it and in favor of CTR_DRBG. Speed. CTR can be parallelized (can encrypt counters in parallel), OFB can't (encrypting state over and over again) So the main reason is speed I'd guess and of course adding OFB_DRBG wouldn't have added ...



Top 50 recent answers are included