Hacker News new | ask | show | jobs
by tptacek 4442 days ago
There is in practice no such thing as "entropy depletion". The retail side of a CSPRNG is very similar to a stream cipher. The idea behind "entropy depletion" is structurally the same as the idea of a stream cipher "depleting its key". You can run AES-CTR as a stream cipher for several exbibytes before the output starts becoming distinguishable (which is not the same thing as "reveals the key").
1 comments

True, unfortunately /dev/random blocking "soon" in Linux helps to propagate this myth. I stand corrected.