Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Sandy Harris
On Sun, Apr 3, 2011 at 11:24 AM, Kevin W. Wall wrote: > Of course, if the GPS is tracking the random walk of a drunken > sailor, you might be OK in terms of your entropy. (Sounds like > an experiment is in order. ;-) No. If he passes out or encounters an interesting woman or pub, the entropy get

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Kevin W. Wall
On 04/02/2011 11:36 PM, Randall Webmail wrote: > First, join the Navy ... Too old...afraid they wouldn't take me. I'd just hang out with an ex-Navy submariner instead. Or I guess in some cases, an ex-Marine might qualify. :) -- Kevin W. Wall "The most likely way for the world to be destroyed, mo

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Randall Webmail
- Original Message - From: "Kevin W. Wall" > > It is in my opinion a mistake to try to infer from a lightly > > entropic source where the entropy is. Take *everything* that you > > think might useful and run it through a hash function. Thinking > > that the entropy is in the low bits is

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Kevin W. Wall
On 04/02/2011 10:20 PM, Jon Callas wrote: >> If you only use the LSB/digit then it's not a concern since those >> numbers have a cycle of tens of meters and on top of that there is >> daily inaccuracy injected by design (not to be confused with jitter >> which was removed from the code 10 years ago

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Jon Callas
> If you only use the LSB/digit then it's not a concern since those > numbers have a cycle of tens of meters and on top of that there is > daily inaccuracy injected by design (not to be confused with jitter > which was removed from the code 10 years ago)... It is in my opinion a mistake to try to

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Jeffrey Walton
On Sat, Apr 2, 2011 at 7:41 PM, Jeffrey Walton wrote: > On Sat, Apr 2, 2011 at 10:22 AM, Tom Ritter wrote: >>> At most, I would think you'd only be able to collect a few bits. >> >> Agreed, I think using anything but the lowest bits would be dangerous. >>  But most smartphones (especially ones wi

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Jeffrey Walton
On Sat, Apr 2, 2011 at 10:22 AM, Tom Ritter wrote: >> At most, I would think you'd only be able to collect a few bits. > > Agreed, I think using anything but the lowest bits would be dangerous. >  But most smartphones (especially ones with GPS sensors) have other > sensors that would be better con

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Krassimir Tzvetanov
>> And I would think an adversary who has observed your travel patterns >> might be able to exploit just about anything if your movements >> are more or less predictable. > Right - suppose the travel patterns were deduced from cell tower > triangulation. Is it a moot point to use GPS coordinates as

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Jeffrey Walton
On Sat, Apr 2, 2011 at 4:15 AM, Kevin W. Wall wrote: > On 04/02/2011 04:10 AM, Jeffrey Walton wrote: >> Hi Guys, >> >> Given a mobile device with GPS location data available, is there any >> benefit to using the location data as an entropy source? >> >> I'm wondering how useful GPS coordinates are

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Tom Ritter
> At most, I would think you'd only be able to collect a few bits. Agreed, I think using anything but the lowest bits would be dangerous. But most smartphones (especially ones with GPS sensors) have other sensors that would be better contributors of entropy, and aren't monitorable by any remote a

Re: [cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Kevin W. Wall
On 04/02/2011 04:10 AM, Jeffrey Walton wrote: > Hi Guys, > > Given a mobile device with GPS location data available, is there any > benefit to using the location data as an entropy source? > > I'm wondering how useful GPS coordinates are if an adversary can > determine location by triangulating a

[cryptography] Mobile Devices and Location Information as Entropy?

2011-04-02 Thread Jeffrey Walton
Hi Guys, Given a mobile device with GPS location data available, is there any benefit to using the location data as an entropy source? I'm wondering how useful GPS coordinates are if an adversary can determine location by triangulating a carrier's cell tower data. Jeff __