RFC 1750:Randomness Recommendations for Security
RFC-Ref

cryptography


Click on the red underlined text to get to the source

... Software cryptography is coming into wider use. Systems like Kerberos, PEM ...
... snooping and spoofing. However, there is a potential flaw. At the heart of all cryptographic systems is the generation of secret, unguessable (i.e., random) numbers. ...
... For the present, the lack of generally available facilities for generating such unpredictable numbers is an open wound in the design of cryptographic software. For the software developer who wants to build a key or password generation procedure that runs on a wide range ...


... Many other requirements come from the cryptographic arena. Cryptographic techniques can be used to provide a variety of services ...
... requirements come from the cryptographic arena. Cryptographic techniques can be used to provide a variety of services including confidentiality ...
... secret key. In other cases, using what are called asymmetric or "public key" cryptographic techniques, keys come in pairs. One key of the pair is private and must be kept secret by one party, the other is public and can be ...
... The frequency and volume of the requirement for random quantities differs greatly for different cryptographic systems. Using pure RSA [CRYPTO1 ...
... For example, consider a cryptographic system that uses 56 bit keys. If these 56 bit ...


... traditional pseudo-random number generator with good statistical properties) and calculate a cryptographic key by starting with the current value of a computer system clock as the seed. An adversary ...


... similarly strengthened the algorithm, possibly against threats not yet known in the public cryptographic community. ...
... bit from each value. It has been shown that in some cases this makes it impossible to break a system even when the cryptographic system is invertible and can be broken if all of each generated value was revealed. ...


... security passwords while the second assumes a need for a very high security cryptographic key. ...
... A Very High Security Cryptographic Key ...
... The meet in the middle attack assumes that the cryptographic algorithm can be decomposed in this way but we can not rule that out without a deep knowledge of the algorithm. Even if a basic algorithm ...
... purpose code breaking hardware or just how much of a safety margin we want beyond our assumptions above, probably a good minimum for a very high security cryptographic key is 128 bits of randomness which implies a minimum key length ...
... key length calculations such at those above are controversial and depend on various assumptions about the cryptographic algorithms in use. In some cases, a professional with a deep knowledge of code breaking techniques and of the strength of the algorithm ...


... for generating unguessable "random" quantities for use as passwords, cryptographic keys, and similar security uses. ...


... - Cryptography: A Primer, A Wiley-Interscience Publication, John Wiley & Sons, 1981, Alan G. Konheim. ...
... - Cryptography: A New Dimension in Computer Data Security, A Wiley-Interscience Publication, John Wiley & Sons, 1982, Carl H. Meyer & Stephen M. Matyas. ...
... - Applied Cryptography: Protocols, Algorithms, and Source Code in C, John Wiley & Sons, 1994, Bruce Schneier. ...
... - Cryptographic Randomness from Air Turbulence in Disk Drives, Advances in Cryptology - Crypto '94, Springer-Verlag Lecture Notes in Computer Science #839, 1984, Don Davis, Ross Ihaka, and Philip Fenstermacher. ...
... - New Directions in Cryptography, IEEE Transactions on Information Technology, November, 1976, Whitfield Diffie and Martin E. Hellman. ...



Google
Web
RFC-Ref