Re: Strong PRNG recommendations?

Michael Paul Johnson (mpj@csn.net)
Fri, 17 Jul 1998 23:05:16 -0600

• Next message: Eric Young: "Re: linux kernel loopback encryption"
• Previous message: Michael Paul Johnson: "Re: Newness of cryptographic algorithms & Diamond 2"
• In reply to: Bruce Schneier: "Re: Newness of cryptographic algorithms & Diamond 2"
• Next in thread: Adam Shostack: "Re: Strong PRNG recommendations?"

>Does anyone have any recommendations for a cryptographically strong
>PRNG routine? It needs to be available as source (obviously) & under
>LGPL/GPL or similar licence.

Take a look at Sapphire II (ftp://ebible.org/mpj/public/sapphire.pdf;
http://cryptography.org/cgi-bin/crypto.cgi/libraries/sapphire.zip) if the
application is not very critical (the algorithm hasn't been extensively
reviewed). RC-4 is pretty well trusted, but beware "trade secret" and
trademark traps.

>While I'm on the subject, does anyone definitively whether PRNGs are
>considered munitions under the EAR?

Yes and no.

• Next message: Eric Young: "Re: linux kernel loopback encryption"
• Previous message: Michael Paul Johnson: "Re: Newness of cryptographic algorithms & Diamond 2"
• In reply to: Bruce Schneier: "Re: Newness of cryptographic algorithms & Diamond 2"
• Next in thread: Adam Shostack: "Re: Strong PRNG recommendations?"