On Thu, 28 Feb 2002, Morlock Elloi wrote:

> As for PRNGs, if you can exchange million bits securely, the desired
> unicity distance (based on your paranoia level) will determine how often
> you must re-key.

Given system lifetime of a decade, and the rate of traffic (clearly a TBps
router leaks more than a few email messages), you might not have to rekey
at all.

> I am not sure that there is a *simple* prng with 10^6 bit state. Feeding

Okay, so there seems to be a niche for it. The simplicty refers to the
algorithm. Of course you have to represent the state, and a parallel
implementation would of course add a constant factor to each bit of state.

> million bits to 1-DES 64 bits at a time and using the output as the key for the
> next cycle could be one way for dilluting entropy.

Reply via email to