Collaborate Disseminate
Wall Street Journal wrote that Bill regrets his password recommendations NIST SP 800-63 Appendix A.
Apprendix A is titled “Estimating Password Entropy and Strength”. It is about how we might assess password strength – not ab… Continue reading Why would Bill Burr of NIST say N3v$r M1^d?
The original question was about the minimum password (or PIN) length (or entropy) for the screen lock in Android. Seeing that nobody answered, and following Schroeder’s advice, I’m going to edit it and just focus on the speed… Continue reading How can an Android device be unlocked, and how long would that take?
Hawking’s message to preserve the planet was radioed into space during his Friday memorial at London’s Westminster Abbey. Continue reading Stephen Hawking’s Voice Was Beamed to a Black Hole During His Funeral
As in the question. Wouldn’t cat /dev/random decrease the entropy estimate until it blocks, which forces the random device to block for all applications on the current system?
Continue reading Would `cat /dev/random` be a denial of service to any other users of `/dev/random`?
We’re in the process of implementing multifactor authentification. One good candidate for this was the “Grid Card” – a small table with random letters and digits. Upon login, the user would be queried for the contents of a ce… Continue reading How much entropy is required for a Grid Card?
In short: Instead of another question asking about when to use /dev/random instead of /dev/urandom, I present the following scenario, in which I find myself in an application I’m building:
A VM or container environment (ie, a fresh insta… Continue reading Is "always use /dev/urandom" still good advice in an age of containers and isolation?
On Linux, it is possible for userspace to mix arbitrary data with the kernel entropy pool by writing to the /dev/urandom device. Is there any equivalent on Windows which does not require SYSTEM?
Continue reading Injecting data into the Windows entropy pool
I’m posting this here as some of you may be intrigued by puzzle.
On the other hand I’ll delete this question in the near future as it may not be best suited for stackexchange.
original post with hints
https://twitter.com/Pr… Continue reading Stegano puzzle using image entropy (crypto bounty included)
The Linux kernel’s randomness driver collects entropy from the environment. Because there will be little entropy during boot, a random seed is often kept at /var/lib/misc/random-seed or a similar location. When the system shuts down, a new… Continue reading Random seed not propagating to the entropy pools in a timely manner
A comment on a Microsoft blog from 2005 mentions over 150 sources of entropy for the Windows CryptGenRandom function. The majority of sources come from low-level system information (precise stat counters), the process’ environment block, h… Continue reading Entropy sources used by modern Windows