|
|
|
|
|
|
by throw0101a
2351 days ago
|
|
|
> No, Arc4random didn't reveal its internal RC4 state as it ran ... Yes, I know. Where did I say anything about revealing? My comment was about 'running out', which is (IIRC) a limitation of some random number generators because of how they handle internal state. Now, that state may have many, many bits, but it is still finite. An analogy I've seen is like having a (paper) codebook. Of course, if a system is compromised, and the attacker can read kernel memory, they can probably then recreate the stream--which is why (e.g.) OpenBSD stirred things up every so often. |
|
|