[avmich]

Thank you, this looks like a great advancement.

> there might be new classes of attacks that we can't guard against, for the simple reason that they haven't been found yet.

I've also puzzled about this phrase in the article. Why "class of attack haven't been found" necessarily leads to "we can't guard against this class of attack"?

I guess we need more definitions here to clarify what we're talking about... but you're doing that already, so maybe this statement can be made more precise elsewhere?

[jon_richards]

>Why "class of attack haven't been found" necessarily leads to "we can't guard against this class of attack"?

One thing I can think of is the practice of using multiple random number generators to generate a number that is random as long as any 1 generator is random. This guards against attacks on a specific generator even if those attacks are unknown. The class of attack is known, however, and protected against.