[cabfpub] Pre-Ballot 164 - Certificate Serial Number Entropy

Jacob Hoffman-Andrews jsha at letsencrypt.org
Tue May 3 10:26:49 MST 2016


> Wouldn't this prohibit the usage of a true RNG, such as a Geiger-Muller
tube detecting radioactive decay, measurement of cosmic background
radiation or any quantum phenomena? I know that these RNGs aren't that
popular, but why limit them?

My understanding is that some HSMs use true RNGs as seeds for a CSPRNG, as
Andrew said. I think it's clear that those are intended for use in a
cryptographic system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20160503/70e5181c/attachment.html 


More information about the Public mailing list