Re: Dirty Secrets of noise based RNGs

2006-07-05 Thread Chris Kuethe
On 7/4/06, Thor Lancelot Simon [EMAIL PROTECTED] wrote: 2) Hifn used to make this documentation publically available but access to it now requires permission from Hifn sales -- it has been password protected on their public web site. In other words, after years of design wins based on

Irish eVoting Vetoed

2006-07-05 Thread David Wagner
The Irish government's commission's report on the NEDAP/Powervote system has been published. (PDFs on the site) http://www.cev.ie/htm/report/download_second.htm As a secure system, it leaves a lot to be desired and it seems to be an example in how not to implement an eVoting system. Just

Re: Use of TPM chip for RNG?

2006-07-05 Thread Peter Gutmann
Thor Lancelot Simon [EMAIL PROTECTED] writes: On Mon, Jul 03, 2006 at 10:41:05AM -0600, Anne Lynn Wheeler wrote: however, at least some of the TPM chips have RNGs that have some level of certification (although you might have to do some investigation to find out what specific chip is being

Re: Use of TPM chip for RNG?

2006-07-05 Thread Peter Gutmann
Ben Laurie [EMAIL PROTECTED] writes: So ... where are these rebadged smartcards deployed? Who rebadges them? System integrators usually. The way it works is that the company that fabs the devices (typically Atmel, STMicroelectronics, or Infineon) create the silicon. Then a second-level vendor

RE: Dirty Secrets of noise based RNGs

2006-07-05 Thread Andrew Tucker
Protego has implementation details of their hw noise based RNG product line at http://www.protego.se/products_en.htm [Moderator's note: The complete copy of the long message this responded to has been elided. Posters, PLEASE trim your postings, and please, do not top post. --Perry]

Re: Use of TPM chip for RNG?

2006-07-05 Thread Anne Lynn Wheeler
Peter Gutmann wrote: Exactly. The FIPS 140 (strictly speaking X9.17/X9.31 PRNG) tests test a generator's determinism, not its nondeterminism. In other word they generate a set of input/output pairs from a known-good generator and then make sure that the generator being certified produces the