top | item 43392456

(no title)

jstasiak | 11 months ago

> Great thing about entropy is that adding more never hurts.

I used to think the same but here's a counter-example of a (hypothetical) attack based on a malicious entropy source being able to manipulate the hash/PRNG output:

https://blog.cr.yp.to/20140205-entropy.html

Now, it's not necessarily the most likely attack to materialize, as already pointed out downthread: https://news.ycombinator.com/item?id=43391377.

discuss

order

No comments yet.