Re: [cryptography] A secret sharing consensus protocol (or leader election protocol)

2013-07-19 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Tony, The following article talks about using secret sharing and threshold signatures to make quorom decisions in a distributed system: L. Zhou and Z.J. Haas, Securing ad hoc networks. IEEE Network 13(6):24?30, November 1999.

[cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Eugen Leitl
- Forwarded message from KheOps khe...@ceops.eu - Date: Fri, 19 Jul 2013 14:03:23 +0200 From: KheOps khe...@ceops.eu To: liberationt...@lists.stanford.edu liberationt...@lists.stanford.edu Subject: [liberationtech] Random number generator failure in Rasperri Pis? User-Agent: Mozilla/5.0

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Peter Gutmann
Eugen Leitl eu...@leitl.org quotes: Just came accross this article, apparently showing the bad quality of the hardware RNG in Raspberri Pi devices. http://scruss.com/blog/2013/06/07/well-that-was-unexpected-the-raspberry-pis-hardware-random-number-generator/ That shows the bad quality of RANDU.

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread David Johnston
On 7/19/2013 5:44 AM, Peter Gutmann wrote: Eugen Leitl eu...@leitl.org quotes: Just came accross this article, apparently showing the bad quality of the hardware RNG in Raspberri Pi devices.

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Mahrud S
Isn't the thermal noise a good enough entropy source? I mean, it's a $25 computer, you can't expect much of it. On Fri, Jul 19, 2013 at 8:44 AM, David Johnston d...@deadhat.com wrote: On 7/19/2013 5:44 AM, Peter Gutmann wrote: Eugen Leitl eu...@leitl.org quotes: Just came accross this

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Nico Williams
On Fri, Jul 19, 2013 at 4:52 PM, Lodewijk andré de la porte l...@odewijk.nl wrote: 2013/7/19 Mahrud S dinovi...@gmail.com Isn't the thermal noise a good enough entropy source? I mean, it's a $25 computer, you can't expect much of it. See, sir, you shouldn't wonder why all your data isn't

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Lodewijk andré de la porte
2013/7/19 Mahrud S dinovi...@gmail.com Isn't the thermal noise a good enough entropy source? I mean, it's a $25 computer, you can't expect much of it. See, sir, you shouldn't wonder why all your data isn't actually encrypted. You shouldn't think it's weird that nothing is secure on your pc.

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread Steve Weis
Hypervisors like KVM can expose random number generator devices to guests: http://libvirt.org/formatdomain.html#elementsRng Funny, because I just noticed KVM's default is /dev/random. If that's the case, I think a guest could exhaust the entropy pool, cause /dev/random to block, and stall any

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread David Johnston
On 7/19/2013 10:13 AM, Mahrud S wrote: Isn't the thermal noise a good enough entropy source? I mean, it's a $25 computer, you can't expect much of it. Directly sampled thermal noise entropy sources have proven: 1) Difficult to model mathematically to determine safe value for min entropy. 2)

Re: [cryptography] [liberationtech] Random number generator failure in Rasperri Pis?

2013-07-19 Thread David Johnston
On 7/19/2013 3:26 PM, Nico Williams wrote: The rpi's HW RNG is almost certainly better than many /dev/*random implementations running as VM guests. How much real business is getting transacted on VMs nowadays? Probably a lot. This probably sounds like a plug for my employer, which it isn't,