0
$\begingroup$

Is hashing random numbers generated from a TRNG enough to create a key?

Basically taking the output of something like a Lavarand and pass that through a hash function like sha-2.

I guess at the end of the day the core of my question is, can an hash function be used as a pseudorandom number generator?

$\endgroup$
2
0
$\begingroup$

Yes, If you have a TRNG you can use the output from it when a random key is required for cryptographic purposes.

If you doubt your TRNG indeed has sufficient entropy and sufficiently small bias, a good strategy is to collect more bits than needed from your entropy source and hash them using a secure hash algorithm.

I believe Lavarand already does something similar it collects entropy and uses it to seed a PRNG. I did not actually review the internal so can't comment but if they do a reasonable job hashing the output would be redundant.

$\endgroup$

Not the answer you're looking for? Browse other questions tagged or ask your own question.