Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-08 Thread Travis H.
On 7/4/06, Taral <[EMAIL PROTECTED]> wrote: On 7/4/06, Andrea Pasquinucci <[EMAIL PROTECTED]> wrote: > About RNG, does someone in the list have any comment, ideas on this > http://www.idquantique.com/products/quantis.htm Why? Noise-based RNGs are just as random and just as "quantum". :) Hella

Re: Use of TPM chip for RNG?

2006-07-05 Thread Anne & Lynn Wheeler
the same level with supposedly the same protection profile ... were in any way comparable (assuming you actually have access to protection profiles that being used for the evaluations). i believe some of the earlier mention chips http://www.garlic.com/~lynn/aadsm24.htm#19 Use of TPM chip for R

Re: Use of TPM chip for RNG?

2006-07-05 Thread Peter Gutmann
Ben Laurie <[EMAIL PROTECTED]> writes: >So ... where are these rebadged smartcards deployed? Who rebadges them? System integrators usually. The way it works is that the company that fabs the devices (typically Atmel, STMicroelectronics, or Infineon) create the silicon. Then a second-level vendo

Re: Use of TPM chip for RNG?

2006-07-05 Thread Peter Gutmann
Thor Lancelot Simon <[EMAIL PROTECTED]> writes: >On Mon, Jul 03, 2006 at 10:41:05AM -0600, Anne & Lynn Wheeler wrote: >> however, at least some of the TPM chips have RNGs that have some level >> of certification (although you might have to do some investigation to >> find out what specific chip is

Re: Use of TPM chip for RNG?

2006-07-04 Thread Thor Lancelot Simon
On Mon, Jul 03, 2006 at 10:41:05AM -0600, Anne & Lynn Wheeler wrote: > > however, at least some of the TPM chips have RNGs that have some level > of certification (although you might have to do some investigation to > find out what specific chip is being used for TPM). See one of the examples i

Re: Use of TPM chip for RNG?

2006-07-04 Thread Ben Laurie
Peter Gutmann wrote: > [EMAIL PROTECTED] ("Hal Finney") writes: > >> A few weeks ago I asked for information on using the increasingly prevalent >> built-in TPM chips in computers (especially laptops) as a random number >> source. > > You have to be pretty careful here. Most of the TPM chips are

Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-04 Thread Taral
On 7/4/06, Andrea Pasquinucci <[EMAIL PROTECTED]> wrote: About RNG, does someone in the list have any comment, ideas on this http://www.idquantique.com/products/quantis.htm Why? Noise-based RNGs are just as random and just as "quantum". :) -- Taral <[EMAIL PROTECTED]> "You can't prove anythin

Re: Use of TPM chip for RNG?

2006-07-04 Thread leichter_jerrold
| On 7/3/06, Leichter, Jerry <[EMAIL PROTECTED]> wrote: | > You're damned if you do and damned if you don't. Would you want to use a | > hardware RNG that was *not* inside a tamper-proof package - i.e., inside | > of a package that allows someone to tamper with it? | | Yes. If someone has physic

Re: Use of TPM chip for RNG?

2006-07-04 Thread Anne & Lynn Wheeler
Travis H. wrote: http://www.usenix.org/publications/library/proceedings/smartcard99/technical.html http://www.usenix.org/publications/library/proceedings/cardis02/tech.html and even this ... having to resort to the wayback machine http://web.archive.org/web/20030417083810/http://www.smartcard

Re: Quantum RNG (was: Use of TPM chip for RNG)

2006-07-04 Thread Andrea Pasquinucci
About RNG, does someone in the list have any comment, ideas on this http://www.idquantique.com/products/quantis.htm "Quantis is a physical random number generator exploiting an elementary quantum optics process. Photons - light particles - are sent one by one onto a semi-transparent mirror and

Re: Use of TPM chip for RNG?

2006-07-04 Thread Travis H.
On 7/2/06, Peter Gutmann <[EMAIL PROTECTED]> wrote: You have to be pretty careful here. Most of the TPM chips are just rebadged smart cards, and the RNGs on those are often rather dubious. My last email of the day, I promise ;-) And if you're interested in some of the smart card developments,

Re: Use of TPM chip for RNG?

2006-07-04 Thread Travis H.
On 7/3/06, Leichter, Jerry <[EMAIL PROTECTED]> wrote: You're damned if you do and damned if you don't. Would you want to use a hardware RNG that was *not* inside a tamper-proof package - i.e., inside of a package that allows someone to tamper with it? Yes. If someone has physical access to yo

Re: Use of TPM chip for RNG?

2006-07-04 Thread Anne & Lynn Wheeler
Peter Gutmann wrote: You have to be pretty careful here. Most of the TPM chips are just rebadged smart cards, and the RNGs on those are often rather dubious. A standard technique is to repeatedly encrypt some stored seed with an onboard block cipher (e.g. DES) as your "RNG". Beyond the obvious

Re: Use of TPM chip for RNG?

2006-07-03 Thread Leichter, Jerry
| > A few weeks ago I asked for information on using the increasingly | > prevalent built-in TPM chips in computers (especially laptops) as a | > random number source. I got some good advice and want to summarize the | > information for the benefit of others. | | Thanks for the useful summary! F

Re: Use of TPM chip for RNG?

2006-07-03 Thread Peter Gutmann
[EMAIL PROTECTED] ("Hal Finney") writes: >A few weeks ago I asked for information on using the increasingly prevalent >built-in TPM chips in computers (especially laptops) as a random number >source. You have to be pretty careful here. Most of the TPM chips are just rebadged smart cards, and the

Re: Use of TPM chip for RNG?

2006-06-30 Thread Jason Holt
On Thu, 29 Jun 2006, "Hal Finney" wrote: A few weeks ago I asked for information on using the increasingly prevalent built-in TPM chips in computers (especially laptops) as a random number source. I got some good advice and want to summarize the information for the benefit of others. Thanks

Re: Use of TPM chip for RNG?

2006-06-29 Thread "Hal Finney"
A few weeks ago I asked for information on using the increasingly prevalent built-in TPM chips in computers (especially laptops) as a random number source. I got some good advice and want to summarize the information for the benefit of others. The TPM chip as spec'd by the Trusted Computing Group

Use of TPM chip for RNG?

2006-06-12 Thread "Hal Finney"
Finding a good source of random bits is a frequent problem in cryptographic applications. Recently many computers have begun shipping with a TPM chip, which among other things includes a hardware RNG. Does anyone know of Windows software which can use the TPM for this purpose? Perhaps via MS CAPI