> From: Mat Robichaud [mailto:[email protected]] > > Sorry for the ambiguity in my question. I am having this issue with the latest > BouncyCastle-PCL 1.8.1 code from GitHub.
That seems like potentially serious. Until it gets attention here (I don't have time right now, and I don't have commit permissions anyway) could you hook into the output of ThreadedSeedGenerator, and just run it through gzip or whatever? Of course if it's truly random, it should pass a much more extensive statistical analysis, but when I examined it before, TSG was outputting data that was compressible ... typically 50%, sometimes as bad as 90%. So that's a very broken entropy source. You need data blocks large enough to show the problem - 32 bytes won't do it. Maybe a few KB or tens of KB. If you're able to confirm that's happening, it would impress some urgency, but it might actually be a separate issue.
