Tim Sewell

Certified at the Source, Broken at the Boundary: An Effect-Based Threat Model for Random Number Generation

Random number generation is usually assured at the source: validate the entropy source, monitor its health, condition its output, and confirm the result passes the standard test batteries. That approach answers the questions it was built for, and deployed generators are better fo...