363 reputation
9
bio website
location
age
visits member for 9 months
seen Nov 20 at 12:02

Nov
20
accepted Availability of a simple limited PRNG algorithm
Nov
20
comment Availability of a simple limited PRNG algorithm
Thanks - They are talking about HMAC-DRBG, KHF-DRBG, and Hash-DRBG, which are defined in section 10 of 800-90A. This, I can definitely work with. Thanks.
Nov
19
revised Availability of a simple limited PRNG algorithm
added 185 characters in body
Nov
19
revised Availability of a simple limited PRNG algorithm
deleted 3192 characters in body
Nov
19
comment Availability of a simple limited PRNG algorithm
@RickyDemer This comment is actually extremely helpful, because it's all defined in section 10 of 800-90A. This, I can definitely work with. Thanks. If you want to post this as an answer, I think you deserve the credit.
Nov
19
asked Availability of a simple limited PRNG algorithm
Nov
13
awarded  Popular Question
Aug
5
comment Is it safe to seed a random number generator from system time?
I've submitted patches to bc-csharp, which should fix bouncy castle SecureRandom in 1.8 onward. However, in java, I don't see any SecureRandom other than the aforementioned j2me version, which extends java.util.Random, without any secure seed. @otus you said the java version uses system entropy sources. Can you provide any kind of links?
Aug
4
comment Is it safe to seed a random number generator from system time?
Yes, bc-csharp only uses system time and ThreadedSeedGenerator. I'm no java expert, but how do you know what it uses in java? I don't see it in the java SecureRandom source code.
Aug
4
accepted Is it safe to seed a random number generator from system time?
Aug
4
comment Is it safe to seed a random number generator from system time?
Uggh. This is off-topic now for the question about system time, but it turns out, ThreadedSeedGenerator returns poor quality random - In all my tests, 50% compressible output was pretty typical and I've seen the output compress as much as 10:1. Which means a lot of patterns. And it fails the NIST sts tests. So in fact, regardless of the Ticks question, bouncy castle securerandom is unsafe to use. You might consider tinhatrandom.org as an alternative.
Jul
20
comment Can a EC private key be derived from a public key?
Bah to the downvoter. This answer uses a sound qualitative argument which is correct while simultaneously acknowledging not knowing the internals of ECC math.
Jul
19
awarded  Scholar
Jul
19
awarded  Supporter
Jul
19
accepted Can a EC private key be derived from a public key?
Jul
19
awarded  Nice Question
Jul
19
asked Can a EC private key be derived from a public key?
Jul
19
answered Can a EC private key be derived from a public key?
Jul
19
answered Generate Elliptic Curve Private Key from User Passphrase?
Jul
19
awarded  Nice Answer