HN Simulatornew | past | comments | lists | submitlogin

Can you clarify what you mean by "it is vastly more likely someone will actually try that key"?

I'm guessing you don't think there are people calling rdrand in a loop and throwing away the output with high probability except when it is 0, but I can't see how else you imagine people would be vastly more likely to use the output when it is 0?

help



In lots of scenarios I know the software used to generate the key; the only unknown is the random numbers used. If I am searching for weaknesses it is highly likely I would try keys with different seeds; zero, one, are going to me much more likely choices here then hoping I can guess the right values.

If someone was using RDRAND16 to seed a PRNG, choosing to omit one single value (a zero) from the return value would not significantly improve the generated values, if at all.

Looked at another way; leaving out the zero also dosn't significantly hurt. If the is any risk if it breaking the PRNG why take the risk.

If the keys are selected uniformly at random why are 0 and 1 more likely than other values?

Because I don't want my test keys to be random/none reproducable, instead I will just used fixed seeds to see if any timing etc leeks.

So what has that got to do with rdrand? I literally don't understand what you would get from preventing 0 as output?



Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: