 
      
    | You are here | www.johndcook.com | ||
| | | | | negativesign.com | |
| | | | | This one hits close to home. I can't imagine how the NIST staff involved in creating SP 800 (and more specifically, the SP 800-90A Dual Elliptic Curve Deterministic Random Bit Generation...bit) must feel. First of all, given the definition of a deterministic system, the title itself gives me pause. Maybe there's some next-level random number theory described in the standard, but I'm not sure I'd ever want a random number generator to exhibit deterministic behavior. | |
| | | | | abseil.io | |
| | | | | Battle-tested, Mom-approved | |
| | | | | deut-erium.github.io | |
| | | | | Numpy uses plain old implementation of Mersenne Twister as the default pseudorandom number generation. | |
| | | | | neilmadden.blog | |
| | | Note: this post will probably only really make sense to cryptography geeks. In "When a KEM is notenough", I described how to construct multi-recipient (public key) authenticated encryption. A naïve approach to this is vulnerable to insider forgeries: any recipient can construct a new message (to the same recipients) that appears to come from the... | ||