Hacker News Reader

This is cool and an awesome tech demo and probably a great recruting technique, but...

Is it actually practically/meaningfully more "Secure" than the standard PseudoRandom approaches that everyone relies on today?

Short of "Nation States sharing secrets of alien technology", is this actually significant to any customer's practical applications?

View on HN

The piece that helps security-wise is that we're mixing in entropy from a trusted external source, so not solely relying on the local random number generation from a machine in a data center somewhere. Is it likely that local random number generation would be compromised? No. But it does give us a little extra peace of mind.

This is more of a defense in depth for the paranoid, but cryptographic PRNGs (and even hardware RNGs) can be compromised in ways that are not easy to find. Since they generate your keys, a compromise of the RNG chain is very valuable for a threat actor.

So, no.

No.

Reply on news.ycombinator.com