Re: depleting the random number generator -- repeated state

[bram]

On Wed, 28 Jul 1999, Jon Callas wrote:

> I never directly add in entropy
> deposits. I run a separate entropy pool that is hash-based, and
> periodically tap that pool to update the secondary pool. I get really
> nervous about adding entropy directly into a single pool. I also like to
> capitalize on the properties of hash functions for prepping the entropy.

You basically have to do that to prevent chosen entropy attacks, and it's
a good idea to pool the entropy anyway to prevent continuation attacks.

-Bram