Re: dev random and urandom
On Mon, 29 Oct 2001 00:21:46 -0500 (EST), Simon Law said:
> From my meagre knowledge of randomness, the best way to test if
> things are good random generators is to query them until you get
> repeats. Of course, best may not be most efficient, or most practical.
Most implementations apply a hash at least to the output (see rfc1750
for the reasons, why this is a Good Thing). So you can't do any
statistical tests on the output.
The only way to analyze a CSPRNG is by a careful aanlyze of the code.
Werner
--
Werner Koch Omnis enim res, quae dando non deficit, dum habetur
g10 Code GmbH et non datur, nondum habetur, quomodo habenda est.
Privacy Solutions -- Augustinus
Reply to: