[Cryptography] Random numbers for Diffie-Hellman

[Jerry Leichter]

> …Whenever you append a new randombit 'r' from the random source, do
> R = R*2 + r and C = C*2
> 
> Whenever you make a choice between K options,
> 
> R = R mod K and C = C div K….
> 
Something is missing here.  Probably multiple something’s.

What’s the actual random choice?  It can’t be R alone as then having returned 0, the next value returned is either 0 or 1.  And the update for C is wonky - once C is 0, it remains 0 forever so it can’t actually contribute to the randomness.

                                          -- Jerry

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.metzdowd.com/pipermail/cryptography/attachments/20241217/42e815f7/attachment.htm>