[DragonFlyBSD - Bug #2677] L15 Update

[bugtracker-admin at leaf.dragonflybsd.org]

Issue #2677 has been updated by robin.carey1.


Dear Alex,

Salsa20 or ChaCha are both more complicated algorithms (and so probably
slower aswell).
Also, I am not aware of any mathematical proofs/assurances of the security
of Salsa20 or ChaCha.
To be honest - I'm not really interested in Salsa20 or ChaCha.

L15 and IBAA are about as fast and simple/uncomplicated as it gets; The
core CSPRNG algorithm of
IBAA is approximately 4 lines of code. And the same is true of L15.

IBAA and L15 both have mathematical security assurances; indirection.

Probably another point worth making (which I believe has been made before)
is that IBAA produces
very high quality random data. The entry for ISAAC on Wikipedia (which
applies to IBAA) praises both
its speed and high-quality.


On 9 June 2014 08:52, <bugtracker-admin at leaf.dragonflybsd.org> wrote:

> Issue #2677 has been updated by alexh.
>
>
> My problem with this is that there seems to be little or no peer review of
> this algorithm. I'd rather see us move in a more mainstream direction,
> possibly using an RNG based on Salsa20 or ChaCha.
>
> ----------------------------------------
> Bug #2677: L15 Update
> http://bugs.dragonflybsd.org/issues/2677#change-12049
>
> * Author: robin.carey1
> * Status: New
> * Priority: High
> * Assignee:
> * Category:
> * Target version: 3.9.x
> ----------------------------------------
> Dear DragonFlyBSD bugs,
>
>
> Today I updated the L15 algorithm, available from:
>
> http://www.leopard.uk.com/L15
>
> The update is to the KSA (Key Scheduling Algorithm).
>
> Perhaps DragonFlyBSD should consider updating their version,
> as used for /dev/urandom ?
>
> ---
>
> Also, I posted a bug report (some months ago now, I suspect),
> which had to do with IBAA (as used for /dev/random), and specifically
> relating to warming up the CSPRNG just before output in:
>
> read_random()
>
> As opposed to doing the warm-up after seeding the CSPRNG,
> which unless I am mistaken, is what DragonFlyBSD does at the
> moment.
>
> I think there might also be one other update to L15 which I
> mentioned on bugs at dragonflybsd.org quite a while ago, which
> I don't think was met with a response. That was to do with the
> STATEINDEX_CARRY change that I made to L15.
>
> ---
>
> In any case I am always happy to discuss these issues by E-mail ...
>
>
> PS Good luck with the new 3.8.0 Release !!
>
>
> --
> Sincerely,
>
> Robin Carey BSc
>
>
>
> --
> You have received this notification because you have either subscribed to
> it, or are involved in it.
> To change your notification preferences, please click here:
> http://bugs.dragonflybsd.org/my/account
>



-- 
Sincerely,

Robin Carey BSc

----------------------------------------
Bug #2677: L15 Update
http://bugs.dragonflybsd.org/issues/2677#change-12056

* Author: robin.carey1
* Status: New
* Priority: High
* Assignee: 
* Category: 
* Target version: 3.9.x
----------------------------------------
Dear DragonFlyBSD bugs,


Today I updated the L15 algorithm, available from:

http://www.leopard.uk.com/L15

The update is to the KSA (Key Scheduling Algorithm).

Perhaps DragonFlyBSD should consider updating their version,
as used for /dev/urandom ?

---

Also, I posted a bug report (some months ago now, I suspect),
which had to do with IBAA (as used for /dev/random), and specifically
relating to warming up the CSPRNG just before output in:

read_random()

As opposed to doing the warm-up after seeding the CSPRNG,
which unless I am mistaken, is what DragonFlyBSD does at the
moment.

I think there might also be one other update to L15 which I
mentioned on bugs at dragonflybsd.org quite a while ago, which
I don't think was met with a response. That was to do with the
STATEINDEX_CARRY change that I made to L15.

---

In any case I am always happy to discuss these issues by E-mail ...


PS Good luck with the new 3.8.0 Release !!


-- 
Sincerely,

Robin Carey BSc



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account