Re: random(4) changes

Stephan Mueller
2016-04-26T21:01:34Z

Am Dienstag, 26. April 2016, 16:43:30 schrieb George Spelvin:

Hi George,

(I am not covering the initial part as I leave you time to read through the
paper which should cover those aspects)

>
> That's what I don't like about Intel's RDRAND and similar hardware RNGs:
> they are whitening too early.
>
> That's also what I don't like about XORing down to 1 bit before adding
> to the pool. Again, whitening too early!
>
>
> Is that any clearer?

I see what you are saying. And I know that the best way (TM) would be to
simply concatenate the time stamps. But that is not feasible.

And considering that I only want to have 0.9 bits of entropy, why should I not
collapse it? The XOR operation does not destroy the existing entropy, it only
caps it to at most one bit of information theoretical entropy. As I can show
that the original value has many more bits of entropy, I use that as my safety
margin.

Hence, I combine the safety margin provided by the XOR folding with a nice and
easy maintenance of the harvested one bit by simply concatenating them. Again,
the entire harvesting and collection shall be very easy to understand without
hiding anything. In addition it is intended to solely use XOR and
concatenation, i.e. the two only functions whose effect on entropy are known.

Ciao
Stephan