Consider a use case that requires the creation of multiple asymmetric key pairs. There are two options for generating random seeds for a PRF:
- Use a software based RNG and generate a new seed for each key pair
- Use a hardware based TRNG, generate a single seed, and increment that value for each new key pair
Would either of these options be superior to the other, in terms of security strengths/weaknesses?
My thinking is that neither solution above would be necessarily insecure.
The RNG solution would generate less entropy than the TRNG initially, but that may not be a problem, depending on the use case, if no other weaknesses were present.
For the TRNG solution, my understanding is that the larger goal is for the salt value to be unique, rather than secret (the private key needs to be secret). As the seed increments, the PRF will mask any resemblance to the original seed.