Messages in this thread | | | Date | Sat, 16 May 2009 09:17:25 -0700 (PDT) | From | Linus Torvalds <> | Subject | Re: [Security] [patch] random: make get_random_int() more random |
| |
On Sat, 16 May 2009, Linus Torvalds wrote: > > So "one of X known functions" does not help
Side note - here the keyword is "X known functions". If the function simply isn't known at all, you've now made it harder by a _much_ higher factor. If the function is any good (ie doesn't leave any patterns to guess what function it is), you really basically have to first solve that independent problem.
And the space of possible functions is pretty damn large, even if you start with some assumption ("some combination of known good cryptographic hashes + some unknown seeding algorithm and data").
So practically speaking, nobody ever cracks those things without somehow decoding the function itself (through doing something like disassembling obfuscated code).
Linus
| |