On Mon, 29 Oct 2001 00:21:46 -0500 (EST), Simon Law said: > From my meagre knowledge of randomness, the best way to test if > things are good random generators is to query them until you get > repeats. Of course, best may not be most efficient, or most practical.
Most implementations apply a hash at least to the output (see rfc1750 for the reasons, why this is a Good Thing). So you can't do any statistical tests on the output. The only way to analyze a CSPRNG is by a careful aanlyze of the code. Werner -- Werner Koch Omnis enim res, quae dando non deficit, dum habetur g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. Privacy Solutions -- Augustinus
