Tag Info

New answers tagged


Let's look at how such a thing might play out: A classic example is the Dual-EC DRBG which employees a back-doored RNG to create a general attack against TLS. The other half of this attack beyond the vulnerable RNG is a mechanism for revealing to the attacker the state of the RNG at the time of use to allow the attacker to predict the remaining "random" ...


There are some classes of PRNG weaknesses which require the attacker to obtain multiple numbers in order to predict the next number in the sequence. Using two PRNGs would compartmentalise the risk, in the event the "public" chain can be predicted, the "secret" numbers may still be unpredictable. Honestly I wouldn't consider it that significant but it could ...

Top 50 recent answers are included