In computing, entropy is the randomness collected by an operating system or application for use in cryptography or other uses that require random data. This randomness is often collected from hardware sources, either pre-existing ones such as mouse movements or specially provided randomness ...

learn more… | top users | synonyms

2
votes
2answers
477 views

How to generate cryptographically strong pseudorandom data very rapidly?

What's the best way to go about generating a fast stream of cryptographically strong pseudorandom data without installing uncommon packages? Drawing from /dev/urandom is far too slow. I had an idea ...
2
votes
2answers
855 views

How can I measure (and increase) entropy on Mac OS X?

I'd like to generate a bunch of keys for long term storage on my MacBook. What's a good way to: measure the amount of entropy and ensure it is sufficient before each key is generated, and ...
2
votes
1answer
46 views

Usefulness of bcrypt(UUIDv4())

One of my colleagues is working on securing OAuth 2 client IDs and secrets for our OAuth server and he has come up with this scheme where he would not only use UUID v4 to generate random values, but ...
2
votes
1answer
390 views

Open-source alternative for CryptGenRandom?

Let's say that for some reason I don't trust CryptGenRandom. Are there any open source software Windows entropy collectors to get cryptographically secure random numbers from for seeding purposes? ...
2
votes
1answer
440 views

Does client certificate authentication demand more server-side entropy?

We have a secure web service running Apache that requires client certificates for access. This service has a problem with running out of entropy. We have several other sites that use TLS that get ...
2
votes
2answers
176 views

Credit card number entropy?

I want to confirm that this understanding is correct: A card has 16 digits plus a CV2 The first 6 digits are an issuer identification number The last digit of the 16 is a Luhn mod 10 check digit. ...
2
votes
1answer
60 views

How many bits of entropy does an identifier contain?

According to https://www.owasp.org/index.php/Insufficient_Session-ID_Length: Assuming that the session identifiers are being generated using a good source of random numbers, we will estimate the ...
2
votes
3answers
242 views

How secure is to seed PRNGs with the sequences from CSPRNG?

Background: Implementing online casino, I would like to use a number of PRNGs with high throughput, like MersenneTwisterFast. I know it is not cryptographically strong, but quite unpredictable when ...
2
votes
1answer
180 views

How to estimate the number of entropy bits & search space of a signature system like passtouch?

Apologies if I'm using the wrong lexicon, I'm just reading up about password systems out of interest. After seeing the xkcd strip on passphrases and coming across the passtouch system (youtube demo) ...
2
votes
0answers
115 views

Passphrase generator and strength & recovery time estimator. Right strength and randomness?

Questions about the strength of pass phrases frequently popup, as does: how to generate a strong passphrase? I tried to combine both in a tool. The free tool also includes recovery time estimations ...
1
vote
2answers
487 views

Password entropy match for alphanumeric but there are special characters in password

I have a problem cracking some of the fundamentals on passwords' entropies. Namely: I have read this article about a guy cracking DKIM of Google (maybe more noticing that the keys are only 512 bits) ...
1
vote
2answers
87 views

Reliable random seed for RNG

I want to create my computer passwords with a RNG, but I am thinking about one thing: I would use python to write that script and the RNG is controlled by one seed, most likely the time. If I would ...
1
vote
3answers
168 views

How much time / “entropy collected” should generating a RSA 2048bit keypair take?

The purpose of my question is get an better idea about reasonable amout of time the generation of the RSA public/private keypair should take? To be less vague let me specify the question and define I ...
1
vote
1answer
75 views

Minimum SHA256'd UTF8 encoded passphrase length not stored anywhere

For a passphrase that is UTF8 encoded and then SHA256'd, what is the minimum length to achieve a practically collision free result? The implementation is for a 32 byte cryptocurrency ed25519 seed ...
0
votes
2answers
531 views

How many bits of entropy should I aim at for my password? [closed]

I mainly use 2 passwords: 1 is a 4 word full lowercase passphrase of 18 letters long which I use wherever possible. The other is basically 3 words and a digit with the first word in full uppercase and ...
0
votes
6answers
465 views

Using passwords made of words

People say don't use passwords in the dictionary but if you use two words isn't it alright? Dictionaries have at least 10,000 entries so just two words will be 100,000,000 possibilities (and that's ...
0
votes
1answer
47 views

What multiplier to use when calculating the average time to crack passwords with a given entropy?

Suppose that we have a process that generates passwords with entropy E. I'd like to compute the average time it would take for a brute-force attack to crack an MD5-hashed instance of such a password. ...
0
votes
1answer
2k views

Why is /dev/random so slow on Linux? [duplicate]

If it's true you only need about 128 bits of entropy to fuel enough data forever, why is it that /dev/random is so slow? My system has uptime of 214 days! Is it really only gathering .000000001 bits ...
0
votes
1answer
72 views

How strong is this encryption? [closed]

Given Dictionary containing 1000 three-letter words: dictionary=abc,def,ghi,jkl,mno,pqr... Randomly chosen words from the dictionary: 10-bits-passwords=abc,def,ghi Randomly chosen three words from ...
0
votes
1answer
85 views

Does adding an extra, non-entropic keyfile lower security? [duplicate]

Suppose I create two TrueCrypt volumes using keyfiles. The first volume uses a keyfile generated by TrueCrypt, whereas the second one uses the same keyfile in addition to a second, non-entropic ...
-1
votes
1answer
102 views

physical access proof smart card for disk encryption [closed]

Current full disk encryption on mobile devices rely on low entropy passwords like PIN numbers or pattern locks. Being able to use a smartcard with such mobile devices is a tempting idea. I know that ...
-3
votes
7answers
726 views

Are passwords made up from concatenating a few foreign words better than shorter random characters? [duplicate]

Does it make sense to insert a foreign word into a paraphrase to mitigate against brute force? For example: "pussiMeansCatInEskimo" "caballoMeansHorse" "CatIsGatto" "SalopeMeansBitch" ...