Daniel J. Bernstein personal blog

Entropy Attacks

The conventional wisdom is that hashing more entropy sources can't hurt: if H is any modern cryptographic hash function then H(x,y,z) is at least as good a random number as H(x,y), no matter how awful z is. So we pile one source on top of another, hashing them all together and hoping that at least one of them is good.
Points
102
HN comments
32
Submissions
1
Cited by
25 commenters

Security & PrivacyMath & Algorithms2025

On Hacker News

SubmittedTitle on HNPointsComments
Mar 25, 2025Entropy Attacks by todsacerdoti10232

Cited in comments

Linked from 35 Hacker News comments by 25 different people, from Mar 2014 to Sep 2026.

Most recent:

Search every comment that links here →

More from Daniel J. Bernstein

All 15 posts →

Related posts from the same era