Re: JTRIG, SIGDEV

From	Johannes Bauer <dfnsonfsduifb@gmx.de>
Newsgroups	comp.programming
Subject	Re: JTRIG, SIGDEV
Date	2015-08-08 19:57 +0200
Organization	albasani.net
Message-ID	<mq5fuf$3i5$1@news.albasani.net> (permalink)
References	<mq1nsl$b1r$1@news.albasani.net> <20150807074449.236@kylheku.com> <mq2p8j$99k$1@news.albasani.net> <20150807143725.869@kylheku.com> <mq4edb$65k$1@news.albasani.net>

Show all headers | View raw

On 08.08.2015 10:25, Mok-Kong Shen wrote:

> I can't yet believe that it's "always" a deadly sin, when a non-CSPRNG
> is used somewhere in a crypto algorithm.

It isn't. There are applications for painfully broken RNGs even in
cryptographic algorithms.

One example would be Miller-Rabin primality testing.

Another one would be determining square roots in finite fields. For
Tonelli-Shanks you need a quadratic non-residue to perform the
operation. You can use any old RNG and just try if you found a QNR.

Both appear within cryptogaphic software. What everyone tries to stuff
into your brain however is that is is NOT OKAY to use such broken RNGs
for key generation. But you just won't understand and repeat the same
drivel over and over and over without once thinking about the whole
thing. That's pretty damn sad.

Cheers,
Johannes

-- 
>> Wo hattest Du das Beben nochmal GENAU vorhergesagt?
> Zumindest nicht öffentlich!
Ah, der neueste und bis heute genialste Streich unsere großen
Kosmologen: Die Geheim-Vorhersage.
 - Karl Kaos über Rüdiger Thomas in dsa <hidbv3$om2$1@speranza.aioe.org>

Thread

JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 09:48 +0200
  Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-07 09:57 +0200
    Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 14:03 +0200
      Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 15:05 +0000
        Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 18:20 +0200
  Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 14:51 +0000
    Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-07 19:18 +0200
      Re: JTRIG, SIGDEV Kaz Kylheku <kaz@kylheku.com> - 2015-08-07 21:57 +0000
        Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 10:25 +0200
          Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 19:57 +0200
            Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 22:14 +0200
              Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-09 12:23 +0200
                Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-09 22:04 +0200
                Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-09 22:08 +0200
                Re: JTRIG, SIGDEV Richard Heathfield <rjh@cpax.org.uk> - 2015-08-11 17:15 +0100
      Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 10:12 +0200
        Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 10:36 +0200
          Re: JTRIG, SIGDEV Johannes Bauer <dfnsonfsduifb@gmx.de> - 2015-08-08 15:25 +0200
            Re: JTRIG, SIGDEV Mok-Kong Shen <mok-kong.shen@t-online.de> - 2015-08-08 22:15 +0200

csiph-web