More options for HW based random number generators supported by kbmMW.
More options for HW based random number generators supported by kbmMW.
https://components4developers.blog/2018/12/04/kbmmw-safety-first-3-hw-random-numbers-2/
https://components4developers.blog/2018/12/04/kbmmw-safety-first-3-hw-random-numbers-2/
Intel CPUs are fine as seed to cryptographic PRNG, but not as single direct source of random data.
ReplyDeleteThe famous quote is plus.google.com - I am so glad I resisted pressure from Intel engineers to let /dev/random rely...
And Intel RND is also (much) slower than AES-NI PRNG for instance, as implemented in our http://blog.synopse.info/post/AES-CSPRNG
A. Bouchez Actually Ive seen non Intel studies that indicates that the entropy of their hw TRNG is in the better end of those. What one can "wonder" about is if there are backdoor in it that somehow can be triggered. kbmMW also includes several other high quality pseudo random number generators which can be seeded from the Intel TRNG, but I would say that for most practical purposes the performance of the TRNG (even the external HW based one supported by kbmMW) is high enough.
ReplyDelete