Hacker News Reader

What you just described is, in theory, just a really bad non-CS PRNG. In that sense we are in agreement that a CSPRNG is not necessary.

To your point, a non-CS PRNG seeded with a static value isn’t “random at all”.

This is why they are sometimes called DRBGs: deterministic random bit generators. You just described two such functions.

View on HN

> This is why they [non-CS PRNGs] are sometimes called DRBGs

CSPRNGs are also sometimes called DRBGs. Classically, "Dual_EC_DRBG" but also NIST SP 800-90A "(AES_)CTR_DRBG," which is what the Windows 10 kernel random device uses.

If this is sufficient, then this matches what I said in the article. I wrote that if you don't care about what numbers you get, don't bother with xoroshiro or Mersenne Twister, just use https://xkcd.com/221/.

Reply on news.ycombinator.com