entropy depletion

[Ben Laurie]

William Allen Simpson wrote:
>> Why then restrict it to non-communications usages?
> 
> 
> Because we are starting from the postulate that observation of the
> output could (however remotely) give away information about the
> underlying state of the entropy generator(s).

Surely observation of /dev/urandom's output also gives away information?

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com