their whole csprng design is utter trash. just provide the user with a textarea and tell him to roll his face on the keyboard for 10 seconds. hash it and you a high quality seed with which you can seed your csprng.
Xavier Bennett
It's just one part of the hash. Mouse movements and keyboard inputs are included/mandatory.
Aaron Cooper
The sad thing is that this is all far inferior to just pulling 320 bytes out of /dev/urandom.
Mason Hill
blog.cr.yp.to/20140205-entropy.html it is fucking retarded. user input is random enough. there is no need to mix it together with other shit.
>/dev/urandom/ >superior to user input ok kiddo
Bentley Hernandez
>/dev/urandom/ >superior to user input Far superior.
Landon Wright
why?
Charles Russell
This is why I'd never go to US or china
Landon Robinson
Its not like you could, fucking neet
Alexander Sullivan
lel working for two companies and got more then enough $$$ otherwise I couldn't smoke weed everyday
Isaac Bennett
can you repeat the question?
Dominic Smith
Because /dev/urandom actually takes user input into account, incorporating the entropy that it actually has rather than the raw text (which has far, far less entropy than the ascii encoding), because the entropy of user input is far lower than you would naively expect, because /dev/urandom incorporates all sorts of other entropy sources as well besides user input, and because it contains a real entropy-seeded csprng rather than some ad-hoc mixing crap.
Cameron Anderson
>rather than some ad-hoc mixing crap do you not know how /dev/random works? also read this: blog.cr.yp.to/20140205-entropy.html mashing on the keyboard for 10 seconds generate more than enough entropy.
Michael Young
>Be me >Pull up at UK C&E >'We need to look at your laptop sir' >'I see there is an encrypted partition sir. Please provide the password' >'Err...I forgot it' >'Come with us sir' Several months in jail later...
Isaac Thomas
>'Oh hi there. Have you remembered the password yet?' >'Err..no' Several years later...
Aiden Scott
>'Sir. The password' >'p-please can I see my d-daughter?'