IssueRaiser

I have a few comments/questions about the post: 1) Why is a mobile phone random number generator good enough to generate encryption...

I have a few comments/questions about the post: 1) Why is a mobile phone random number generator good enough to generate encryption keys, but not good enough to generate one time pads? What extra weaknesses do one time pads expose? 2) For their 2nd point, Zendo has said that the pad exchange happens locally ( device to device ). So you would need to be in the room to eavesdrop. So the transport mechanism they choose there is a little bit less of a risk I think. 3) Their 3rd point also doesn't seem to be that big enough of a deal to warrant the tone... if sha256 is broken, a man in the middle would be able to corrupt messages, but not in a meaningful way ( ie switching yes to no ), it would just look like garbage to the other person... I think #1 is probably the biggest issue, I'd like to understand it a bit more.

Posted by utnick on Mar 26, 2015, 12:57 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.7,500 issues0 comments

reliability (Other)

I have a few comments/questions about the post: 1) Why is a mobile phone random number generator good enough to generate encryption...

utnickMar 26, 2015, 12:57 PM

I have a few comments/questions about the post: 1) Why is a mobile phone random number generator good enough to generate encryption keys, but not good enough to generate one time pads? What extra weaknesses do one time pads expose? 2) For their 2nd point, Zendo has said that the pad exchange happens locally ( device to device ). So you would need to be in the room to eavesdrop. So the transport mechanism they choose there is a little bit less of a risk I think. 3) Their 3rd point also doesn't seem to be that big enough of a deal to warrant the tone... if sha256 is broken, a man in the middle would be able to corrupt messages, but not in a meaningful way ( ie switching yes to no ), it would just look like garbage to the other person... I think #1 is probably the biggest issue, I'd like to understand it a bit more.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue