New answers tagged

1

Linux uses TSC by default for its clock source due to its lower overhead, and only uses HPET as the fallback. The kernel gathers entropy from interrupt timing intervals, using the RDTSC instruction on x86 processors. Unless you do not have TSC support, then I do not believe disabling HPET will influence your entropy collection at all. Only on certain ...


0

To a large degree, this depends on how much random output you need. I'm assuming quite a lot, since you're talking about already having 128 or 256 bytes of random data to seed it with, and you are correct that System.Random is not good enough for this. I'm hesitant to recommend options, because this entire design pattern is fraught with danger. Small ...


1

To generate a secure random number in .Net you should use system.security.cryptography.rngcryptoserviceprovider instead of system.random The documentation for it is here: https://msdn.microsoft.com/en-us/library/system.security.cryptography.rngcryptoserviceprovider(v=vs.110).aspx In case of link rot, here is the C# sample that Microsoft provide on that ...


2

What you have invented is essentially a random number generator, and not "a true one way function". A one way function is something that alwasy generates the same output for the same input, but can not be reversed. You use one way functions to hash things - how would you hash something with this scheme? So if it's a random number generator, is it ...


5

If you use some "natural" sound, you have lots of redudancy in it and this reduces the key strength (this may or may not be critical to your application). Because you cannot reproduce your sound key, you'll have to store it (in a passphase-locked key store). With this condition, a randomly generated strong key is always better.


2

A very interesting idea. I suppose that malware could indeed obtain a very hard to reproduce key like this, however there could be some issues : the target's microphone is muted there is a very low amount of sound in the room - no sound is captured I would suggest to have a fallback mechanism to a more classic key creation system if such conditions ...



Top 50 recent answers are included