Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.programming > #5611
| From | Mok-Kong Shen <mok-kong.shen@t-online.de> |
|---|---|
| Newsgroups | comp.programming |
| Subject | Re: JTRIG, SIGDEV |
| Date | 2015-08-08 10:36 +0200 |
| Organization | albasani.net |
| Message-ID | <mq4f1o$72l$1@news.albasani.net> (permalink) |
| References | <mq1nsl$b1r$1@news.albasani.net> <20150807074449.236@kylheku.com> <mq2p8j$99k$1@news.albasani.net> <mq4dlh$4os$1@news.albasani.net> |
Am 08.08.2015 um 10:12 schrieb Johannes Bauer: > On 07.08.2015 19:18, Mok-Kong Shen wrote: > >> In the other thread I argued that, since an algorithm of CSPRNG >> given in HAC is based on RSA, there would have been a vicious >> circle in implementation, if the generation of RSA keys had required >> from the outset an CSPRNG. (If this 2nd CSPRNG is not available, >> then the implementation of the first CSPRNG is obviously impossible. >> If the 2nd CSPRNG is available, then in the clearly majority of cases >> in practice one would (for convenience and economy) simply use that >> 2nd CSPRNG and not spend any additional time and efforts to do an >> implementation for the 1st CSPRNG. >> >> Is there any logical error in my argument above? > > Yes. > > You seem to think that a CSPRNG is the only way to generate keys. That > is absolutely false. > > For key generation typically a TRNG is used. If it is absolutely > necessary, then one may rely on a CSPRNG that has been seeded by a TRNG. > Under no circumstances is any of the following ever a surrogate for a TRNG: > > (1) A regular PRNG (even if seeded by a TRNG) > (2) A CSRNG seeded by deterministic data > > You're using the worst of two world: A regular PRNG seeded by > deterministic data and claim to use secure key generation. > > And you repeatedly spreading that somehow an RSA-CSPRNG would be a > prerequisite or the only way to generate RSA keys is ludicrous. You > clearly demonstrate your vast inaptitude when it comes to cryptography > time and time again. Oh, I don't remember to have ever claimed that "somehow an RSA-CSPRNG would be a prerequisite or the only way to generate RSA keys"!! Could you please quote me? You seem also to be an expert in issues of entropy. Could you please read my answer to Kylheku, just sent, and eventually provide answers to points that he may not sufficiently cover in his next post? M. K. Shen
Back to comp.programming | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 09:48 +0200
Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-07 09:57 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 14:03 +0200
Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 15:05 +0000
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 18:20 +0200
Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 14:51 +0000
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 19:18 +0200
Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 21:57 +0000
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 10:25 +0200
Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 19:57 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 22:14 +0200
Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-09 12:23 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-09 22:04 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-09 22:08 +0200
Re: JTRIG, SIGDEV Richard Heathfield <rjh@cpax.org.uk> - 2015-08-11 17:15 +0100
Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 10:12 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 10:36 +0200
Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 15:25 +0200
Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 22:15 +0200
csiph-web