[cabfpub] Pre-Ballot 164 - Certificate Serial Number Entropy

Fotis Loukos fotisl at it.auth.gr
Thu May 5 06:27:22 UTC 2016



On 05/04/2016 09:55 PM, Jacob Hoffman-Andrews wrote:
> On Tue, May 3, 2016 at 11:53 PM, Fotis Loukos <fotisl at it.auth.gr <mailto:fotisl at it.auth.gr>> wrote:
> 
>     There are hardware devices that use cryptographic hash functions in order to unbias the biased input by the RNG. However, a cryptographic hash function is not a CSPRNG.
> 
> 
> Would you agree that those devices are "intended for use in a cryptographic system?"

Yes, of course, I simply disagree with the pseudo part of the CSPRNG.

Fotis



More information about the Public mailing list