Re: randomness // how important is it 'really', if it's not *absolutely* random ?

2009-01-28 Thread Robert J. Hansen
ved...@hush.com wrote: > if the randomness collected for generation of a gnupg session key, > isn't *absolutely* random, then it may introduce a bias whereby the > session key space can be theoretically be able to be attacked by a > 'better-than-brute-force' method, by selectively concentrating

Re: randomness // how important is it 'really', if it's not *absolutely* random ?

2009-01-28 Thread Chris De Young
ved...@hush.com wrote: [...] > how much of a threat is this really, > given the nature of how gnupg collects random data on the various > computer platforms? I don't have the math or crypto background to answer you definitively, but I feel confident that *today* the difference between the randomn

randomness // how important is it 'really', if it's not *absolutely* random ?

2009-01-28 Thread vedaal
if the randomness collected for generation of a gnupg session key, isn't *absolutely* random, then it may introduce a bias whereby the session key space can be theoretically be able to be attacked by a 'better-than-brute-force' method, by selectively concentrating on the possibilities the bias