[Cryptography] Hard Truths about the Hard Business of finding Hard Random Numbers

James A. Donald Jamesd at echeque.com
Thu Jan 30 22:05:41 EST 2014


On 2014-01-31 11:29, John Kelsey wrote:
> There is a tradeoff between purpose-built crypto hardware, and off-the-shelf computers and devices pressed into service to do crypto.  The purpose-built crypto hardware and software is a bigger target for very high end attackers, but it is also almost certain to be designed to be harder to tamper with in the field

You cannot tamper with a sound card in the field to make it fail as a 
source of randomness, without making it into a very bad microphone 
input, with the result that it will get thrown out and replaced, so that 
the use can play games and make phone calls.




More information about the cryptography mailing list