The generation of random or pseudorandom data, and the use of randomness in security protocols

learn more… | top users | synonyms

1
vote
1answer
50 views

Is it fine to store single-use beta keys plain-text?

Is it okay to store single-use beta keys in plain-text in the database? I'll be pre-generating and storing about 2M keys. The keys get passed around so that people can sign up with it, rather than let ...
4
votes
0answers
16 views

Is is possible to avoid internal seeding of a RNG and seed the generator manually using OpenSSL's RAND_bytes()?

I'm trying to write a random number generator with the OpenSSL library. The provided RAND_bytes() function is self-seeding with the /dev/urandom. That's why I am only able to reseed with the ...
4
votes
0answers
26 views

Should other processes be running while an iPhone or Android is generating a cryptographically random number?

I need to generate a cryptographically secure random number on iOS and Android. I could use a software approach or leverage the built in OS API for this. In each case, is it better to generate a ...
1
vote
0answers
45 views

Ring Oscillator: TRNG vs PUF

Ring oscillators can be used in hardware true random number generators (TRNG), and also in physically unclonable functions (PUFs). The designs seem fairly similar: TRNG based on ring oscillators: ...
1
vote
0answers
43 views

Steps for creating a test environment where GUIDs are exploitable?

I have been using GUIDs as un-guessable tokens in various situations for some time. I came across this question/answer which seems to suggest that while this is ok in some situations, it should not ...