Re: [cryptography] urandom vs random

2013-08-21 Thread Sebastian Schinzel
On 21. Aug 2013, at 09:32 AM, Dominik wrote: > You can use DieHarder, which is a collection of statistical tests to evaluate > if somethings looks random. Problem is that you have to use the suite in a proper way. Checking a single "weak Debian SSL key pair" probably would not have raised the

Re: [cryptography] Preventing Time Correlation Attacks on Leaks: Help! :-)

2013-08-21 Thread Sebastian Schinzel
Dear Fabio, On 21. Aug 2013, at 09:35 AM, "Fabio Pietrosanti (naif)" wrote: > Which kind of logic / algorithm to apply on the Receiver's notification > timing in order to prevent / reduce the likelihood that a time correlation > pattern is possible? > > A random delay between a lower bounday