On the "randomness" of DNS

[Pierre-Evariste Dagand]

> I doubt you can get a large enough sample in any reasonable time.

Indeed.

> > I don't see the point of evaluating the quality of a random number
> > generator by statistical tests.
>  Which is entirely my point.

I fear I was not clear: I don't see what is wrong in evaluating the
quality of a random number generator with (an extensive set of)
statistical tests.

For sure, it would be better if we could check the source code and
match the implemented RNG against an already known RNG.

But, then, there is a "the chicken or the egg" problem: how would you
ensure that a *new* RNG is a good source of "randomness" ? (it's not a
rhetorical questions, I'm curious about other approaches).

Regards,

-- 
Pierre-Evariste DAGAND

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com