The case of the 9 bit AES key

(v12.sh)

40 points | by ledoge 1 hour ago

4 comments

  • ubutler 10 minutes ago
    Rule #1 of rolling your own RNG: don’t.

    Rule #2? Please don’t.

  • JonChesterfield 25 minutes ago
    Wonderful.
  • paulpauper 1 hour ago
    it's like the weak hardware wallet entropy bug
  • jeffbee 51 minutes ago
    You'd have to be completely off your rocker to use a PDF tool written in C anyway.
    • advisedwang 29 minutes ago
      very VERY few people judge tools like this by the language used to develop them.
      • jeffbee 19 minutes ago
        How many people judge their tools based on the AES key entropy?
        • OptionX 4 minutes ago
          A lot actually.

          You're confusing just assuming by default its enough for purpose rather than not caring at all.

    • cowlevel 37 minutes ago
      What are the alternatives?
    • lirolero 42 minutes ago
      Genuine question, since I'm not very knowledgeable about this: why is using C for a PDF tool such a bad idea?