<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br><br>dol@ с iPad</div><div><br>19 дек. 2015 г., в 15:16, Dmitry Belyavsky <<a href="mailto:beldmit@gmail.com">beldmit@gmail.com</a>> написал(а):<br><br></div><blockquote type="cite"><div><div dir="ltr">Dear Basil, <div class="gmail_extra"><br><div class="gmail_quote">On Sat, Dec 19, 2015 at 1:11 PM, Basil Dolmatov <span dir="ltr"><<a href="mailto:dol@reedcat.net" target="_blank">dol@reedcat.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
dol@ с iPad<br>
<br>
> 19 дек. 2015 г., в 1:22, Jacob <<a href="mailto:jacob@edamaker.com">jacob@edamaker.com</a>> написал(а):<br>
<span class="">><br>
><br>
> A question to the experts:<br>
><br>
> I fully understand the trust gained by having a custom made external analog TRNG as we do here, but wouldn't be better to XOR the bitstream received from our generator with the one embedded in the CPU(*)?<br>
</span>What means 'better' in this case?<br>
Mixing two really good sources of entropy does not make output 'better' considering entropy quality.<br>
This mixing can give one some hope that having mediocre entropy sources one can make the result better.<br>
<br>
Having a good source of entropy I can not see any reason for mixing it with other data.<br></blockquote><div><br></div><div>If software can obtain random data from the system, it may be useful to add the true-random data to the standard system sources of it instead of using the different hardware devices directly.</div></div></div></div></div></blockquote>In this project hardware source is used for seeding software random generator only<br><blockquote type="cite"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div><br></div><div>-- <br></div></div><div class="gmail_signature">SY, Dmitry Belyavsky</div>
</div></div>
</div></blockquote></body></html>