entropy depletion

[William Allen Simpson]

Ben Laurie wrote:

> William Allen Simpson wrote:
>
>>> Why then restrict it to non-communications usages?
>>
>> Because we are starting from the postulate that observation of the
>> output could (however remotely) give away information about the
>> underlying state of the entropy generator(s).
>
> Surely observation of /dev/urandom's output also gives away information?
>
ummm, no, not by definition.

/dev/random
  blocks on insufficient estimate of stored entropy
  useful for indirect measurement of system characteristics
  (assumes no PRNG)

/dev/urandom
  blocks only when insufficient entropy for initialization of state
  computationally infeasible to determine underlying state
  (assumes robust PRNG)

These are the definitions we've been using around here for many years. 
It does help when everybody is talking about the same things.

I'll note that many systems (including the MacOSX that I'm using to
write this) have made /dev/random and /dev/urandom the same....

-- 
William Allen Simpson
    Key fingerprint =  17 40 5E 67 15 6F 31 26  DD 0D B9 9B 6A 15 2C 32


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com