[I let this through because it makes a new point. Don't assume I'll
let other posts go through if they are "me too!", though -- we've
beaten the RNG topic to death. --Perry]

    > Intel has announced a number of interesting things at the RSA conference.
    > The most important, to me, is the inclusion of a hardware random number
    > generator (based on thermal noise) in the Pentium III instruction set.
    > They also announced hardware support for IPSEC.
    
    An interesting question (for me, at least) is: how will I know that the
    hardware RNG is really producing stuff based on thermal noise, and not,
    say, on the serial number, some secret known to Intel, and a PRNG?

You don't.  More to the point, there is no way
to test a random number generator within the 
small (and shrinking) automated test time that is
part of the production line.  The falsifiable
hypothesis for a multiplier, say, is that it 
gets the right answer.  The falsifiable hypothesis
for a RNG is a long slog through volumes of output.
All the production line can say is "turns out a
stream of bits that ain't all ones or zeroes."
I'd imagine that failed devices will be common 
enough to be a intellectual curiousity, at least.

--dan

============================================================
"Conspiracy theories are irresistable labor-saving devices
in the face of complexity." -- Henry Louis Gates
============================================================

Reply via email to