<div>
    <br />
</div>
<div>
    <br />
</div>
<div>On Wed, Dec 13, 2017 at 9:54 PM, Dave Horsfall <<a href="mailto:dave@horsfall.org" class="" style="font-size: 1em;">dave@horsfall.org</a>> wrote:
    <br />
    <blockquote class="protonmail_quote" type="cite">I'm still learning here, but is that a weakness of crypto in general i.e. always avoid null keys and IVs, or AES in particular?</blockquote><span style="background-color: rgba(255, 255, 255, 0);"><div><span style="background-color: rgba(255, 255, 255, 0);">The point is that </span>
    <span
    style="background-color: rgba(255, 255, 255, 0);">s</span><span style="background-color: rgba(255, 255, 255, 0);">t</span><span style="background-color: rgba(255, 255, 255, 0);">a</span><span style="background-color: rgba(255, 255, 255, 0);">t</span><span style="background-color: rgba(255, 255, 255, 0);">i</span>
        <span
        style="background-color: rgba(255, 255, 255, 0);">s</span><span style="background-color: rgba(255, 255, 255, 0);">ti</span><span style="background-color: rgba(255, 255, 255, 0);">c</span><span style="background-color: rgba(255, 255, 255, 0);">a</span><span style="background-color: rgba(255, 255, 255, 0);">l</span>
            <span
            style="background-color: rgba(255, 255, 255, 0);"> </span><span style="background-color: rgba(255, 255, 255, 0);">te</span><span style="background-color: rgba(255, 255, 255, 0);">sts are not actually very </span><span style="background-color: rgba(255, 255, 255, 0);">useful for judging RNGs, not that there’s something</span>
                <span
                style="background-color: rgba(255, 255, 255, 0);">wrong with AES.</span><span style="background-color: rgba(255, 255, 255, 0);"> It’s easy to create an entirely predictable PRNG that will pass any given statis</span><span style="background-color: rgba(255, 255, 255, 0);">ti</span>
                    <span
                    style="background-color: rgba(255, 255, 255, 0);">c</span><span style="background-color: rgba(255, 255, 255, 0);">a</span><span style="background-color: rgba(255, 255, 255, 0);">l</span><span style="background-color: rgba(255, 255, 255, 0);"> </span><span style="background-color: rgba(255, 255, 255, 0);">t</span>
                        <span
                        style="background-color: rgba(255, 255, 255, 0);">e</span><span style="background-color: rgba(255, 255, 255, 0);">s</span><span style="background-color: rgba(255, 255, 255, 0);">t</span><span style="background-color: rgba(255, 255, 255, 0);">.</span><span style="background-color: rgba(255, 255, 255, 0);"> In fact, this is basically one of the definitions we can use to define a keyed PRNG in cryptographic proofs. </span>
                            <span
                            style="background-color: rgba(255, 255, 255, 0);"></span>
</div>
</span>
</div>