Hacker News new | past | comments | ask | show | jobs | submit login

You don't need a CSPRNG to do SHA512, which their solution already incorporates.



This is the text from the original article.

"For this reason, since PuTTY was developed on Windows before it had any cryptographic random number generator at all, PuTTY has always generated its k using a deterministic method, avoiding the need for random numbers at all."


Both my proposed naive method and the PuTTY implementation are deterministic. The only difference is how the primitives (eg. SHA-512) are combined.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: