alt Hacker NewsCan you link to the paper you're thinking of? Maybe people are just talking past each other here. A biased random source can't bias the kernel random pool in any straightforward kind of way.
Can you link to the paper you're thinking of? Maybe people are just talking past each other here. A biased random source can't bias the kernel random pool in any straightforward kind of way.
I explicitly said
because the malicious source can just precompute the hash for the bias it wants.https://blog.cr.yp.to/20140205-entropy.html