dev-cpp-users Mailing List for Dev-C++
Open Source C & C++ IDE for Windows
Brought to you by:
claplace
You can subscribe to this list here.
| 2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(15) |
Oct
(115) |
Nov
(154) |
Dec
(258) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
(377) |
Feb
(260) |
Mar
(249) |
Apr
(188) |
May
(152) |
Jun
(150) |
Jul
(195) |
Aug
(202) |
Sep
(200) |
Oct
(286) |
Nov
(242) |
Dec
(165) |
| 2002 |
Jan
(245) |
Feb
(241) |
Mar
(239) |
Apr
(346) |
May
(406) |
Jun
(369) |
Jul
(418) |
Aug
(357) |
Sep
(362) |
Oct
(597) |
Nov
(455) |
Dec
(344) |
| 2003 |
Jan
(446) |
Feb
(397) |
Mar
(515) |
Apr
(524) |
May
(377) |
Jun
(387) |
Jul
(532) |
Aug
(364) |
Sep
(294) |
Oct
(352) |
Nov
(295) |
Dec
(327) |
| 2004 |
Jan
(416) |
Feb
(318) |
Mar
(324) |
Apr
(249) |
May
(259) |
Jun
(218) |
Jul
(212) |
Aug
(259) |
Sep
(158) |
Oct
(162) |
Nov
(214) |
Dec
(169) |
| 2005 |
Jan
(111) |
Feb
(165) |
Mar
(199) |
Apr
(147) |
May
(131) |
Jun
(163) |
Jul
(235) |
Aug
(136) |
Sep
(84) |
Oct
(88) |
Nov
(113) |
Dec
(100) |
| 2006 |
Jan
(85) |
Feb
(119) |
Mar
(33) |
Apr
(31) |
May
(56) |
Jun
(68) |
Jul
(18) |
Aug
(62) |
Sep
(33) |
Oct
(55) |
Nov
(19) |
Dec
(40) |
| 2007 |
Jan
(22) |
Feb
(49) |
Mar
(34) |
Apr
(51) |
May
(66) |
Jun
(43) |
Jul
(116) |
Aug
(57) |
Sep
(70) |
Oct
(69) |
Nov
(97) |
Dec
(86) |
| 2008 |
Jan
(32) |
Feb
(47) |
Mar
(106) |
Apr
(67) |
May
(28) |
Jun
(39) |
Jul
(31) |
Aug
(25) |
Sep
(18) |
Oct
(25) |
Nov
(5) |
Dec
(21) |
| 2009 |
Jan
(33) |
Feb
(27) |
Mar
(27) |
Apr
(22) |
May
(22) |
Jun
(10) |
Jul
(17) |
Aug
(9) |
Sep
(21) |
Oct
(13) |
Nov
(4) |
Dec
(11) |
| 2010 |
Jan
(10) |
Feb
(8) |
Mar
(4) |
Apr
(1) |
May
|
Jun
(2) |
Jul
|
Aug
(1) |
Sep
(8) |
Oct
(26) |
Nov
(9) |
Dec
(1) |
| 2011 |
Jan
(21) |
Feb
(16) |
Mar
(4) |
Apr
(19) |
May
(26) |
Jun
(9) |
Jul
(6) |
Aug
|
Sep
(4) |
Oct
(3) |
Nov
(2) |
Dec
(1) |
| 2012 |
Jan
(4) |
Feb
(7) |
Mar
(4) |
Apr
|
May
(1) |
Jun
(10) |
Jul
(1) |
Aug
(1) |
Sep
(18) |
Oct
(3) |
Nov
(1) |
Dec
(1) |
| 2013 |
Jan
(4) |
Feb
(2) |
Mar
(15) |
Apr
(6) |
May
(1) |
Jun
(3) |
Jul
(1) |
Aug
(2) |
Sep
(4) |
Oct
|
Nov
(9) |
Dec
|
| 2014 |
Jan
(4) |
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
(5) |
Aug
(4) |
Sep
|
Oct
(2) |
Nov
(1) |
Dec
(4) |
| 2015 |
Jan
(2) |
Feb
(3) |
Mar
(1) |
Apr
(2) |
May
(1) |
Jun
(2) |
Jul
|
Aug
(1) |
Sep
(2) |
Oct
(9) |
Nov
(35) |
Dec
(6) |
| 2016 |
Jan
(7) |
Feb
(10) |
Mar
(10) |
Apr
(9) |
May
(13) |
Jun
(9) |
Jul
(1) |
Aug
(3) |
Sep
(3) |
Oct
(1) |
Nov
(1) |
Dec
|
| 2017 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2018 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2019 |
Jan
(1) |
Feb
|
Mar
|
Apr
(2) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2020 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| S | M | T | W | T | F | S |
|---|---|---|---|---|---|---|
|
|
1
(7) |
2
(15) |
3
(3) |
4
(9) |
5
(7) |
6
(12) |
|
7
(18) |
8
(14) |
9
(11) |
10
(6) |
11
(16) |
12
(14) |
13
(7) |
|
14
|
15
|
16
(2) |
17
(3) |
18
(5) |
19
(3) |
20
(1) |
|
21
(3) |
22
(8) |
23
(14) |
24
(9) |
25
(8) |
26
(4) |
27
(2) |
|
28
(8) |
29
(1) |
30
(4) |
|
|
|
|
|
From: Cary H. <xen...@gm...> - 2004-11-10 18:14:55
|
.asm files need an assembler. the "tools" devpak contains both and assembler and disassembler which you could try. the assembler will create an object file which the linker can then use. Cary On Wed, 10 Nov 2004 18:45:33 +0100, Pascal <p.t...@ti...> wrote: > Hello All, > > I will build xvid.dll and vfw.dll,but there are .asm code for > optimisation to pentium 4. > How to build with this asm code under devcpp? > Or how to make .asm a objet file? > The build in static librairie are ok,but when i will build in dynamic > librairie there a error compilation [Linker Error]. > > Thanks > > ------------------------------------------------------- > This SF.Net email is sponsored by: > Sybase ASE Linux Express Edition - download now for FREE > LinuxWorld Reader's Choice Award Winner for best database on Linux. > http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click > _______________________________________________ > Dev-cpp-users mailing list > Dev...@li... > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users > |
|
From: Pascal <p.t...@ti...> - 2004-11-10 17:47:07
|
Hello All, I will build xvid.dll and vfw.dll,but there are .asm code for optimisation to pentium 4. How to build with this asm code under devcpp? Or how to make .asm a objet file? The build in static librairie are ok,but when i will build in dynamic librairie there a error compilation [Linker Error]. Thanks |
|
From: Cary H. <xen...@gm...> - 2004-11-10 17:25:38
|
Hey, I was wondering if there was a way to define where Dev-Cpp stores all of the config files. I am trying to get dev-cpp to run off a flash drive (which it does), but I have to set the settings on each new computer I run it on as by deafult dev-cpp looks for these settings within the c:\documents and settings\ folder. thanks Cary |
|
From: Per W. <pw...@ia...> - 2004-11-10 10:35:32
|
Try again. www.random.org is working! /Per W On Tue, 9 Nov 2004, Roger Furer wrote: > Aloha from Honolulu, > My browser (Mozilla) reports that it can't find that web site. I > also tried pasting http// ahead of the www, but got the same > non-result. Having followed this debate I'm curious. I hope you can > post a better URL. > Mahalo (Thank You), > Roger Furer > > Rob Lawless wrote: > > > I am completely niave to this science of randomness but my college > > lecturer > > designed a program to generate true random numbers i am not aware of > > the ins > > & outs of how its done basically something to do with atmospheric noise > > everything is explained on his website > > www.random.org <http://www.random.org> > > just thought i would mentions this seeing as you are getting into a pretty > > heated debate :) > > & as always have fun! > > rob > > ----- Original Message ----- > > From: "Per Westermark" <pw...@ia... > > <mailto:pw...@ia...>> > > To: "Aitor Moreno" <ait...@gm... <mailto:ait...@gm...>> > > Cc: <dev...@li... > > <mailto:dev...@li...>> > > Sent: Tuesday, November 09, 2004 8:09 PM > > Subject: Re: [Dev-C++] true random numbers. > > > > > > > There are already good random number generators with immensely much > > better > > > randomnes and immensely much longer sequences making them evilishly hard > > > to follow. > > > > > > With a good entrophy to seed them - some of which I discussed in my > > > previous mail - even a quite simle application can use good > > cryptographic > > > strength random numbers. > > > > > > Why invent an octagonal wheel when there are already true round wheels > > > available out there on the net? > > > > > > Let's play a bit with the time() function - even if repeated a large > > > number of times - doesn't create hardly any entrophy. Let's say you > > get 10 > > > bits of entrophy for the first call (i.e. a random time within a start > > > window of 15 minutes). Each following call add an entrophy close to > > zero. > > > Let's say that you call time() on average every 60 seconds (2^6 > > > alternatives), which might give you 6 bits of entrophy. To get 256 > > bits of > > > entrophy (a very lousy entrophy for encryption seed), you then need 40 > > > calls within a 40 minute interval... For real entrophy, you should > > > probably have at least 1024 or 2048 bits, which in this case > > translates to > > > a smapling interval of 150 to 300 minutes. > > > > > > Let's then look a bit closer at the above alternative. You have > > still not > > > specified how you should manage to make the individual "random" delays > > > between each time() sample. If this isn't true random (which it can't be > > > since you haven't even managed to get a real seed yet) and instead > > > generated by calls to rand() (which is using a known algorithm and > > have a > > > very short sequence) then your 6 bits of entrophy for each 60 second > > > window actually gets multiplied by 0, i.e. you are still at your initial > > > 10 bits of entrophy from the 15-minute uncertainty of when the first > > call > > > was made. > > > > > > A large number of people have tried your approach in a number of > > variants. > > > Every one of them who have had their results stressed have fallen > > through, > > > i.e. the "randomnes" has been quickly shot to pieces. > > > > > > We are not talking about world-class cryptographic analysis to pick the > > > above methods to pieces. More like a suitable programming exercise for > > > project Euler: > > > http://www.mathschallenge.net/index.php?section=project > > > or maybe a home exercise for some courses at the university. > > > > > > - There are no ways to just algorithmically create randomnes. > > > - There are good random number generators available freely. > > > - For most environments, entrophy can be picked up from the system. > > > > > > Why then bother to try and do something that can't be done? Instead fix > > > good random generator from the net. Fix reasonably good entrophy > > from the > > > system. Mix together and use. Takes less time than even thinking about > > > inventing some smart methods for "garbling" the rand() sequence. > > > > > > time(), srand(), rand() etc are _only_ for selecting which attack a > > moster > > > should use, what color a screen saver should display etc. They can > > not be > > > used for anything where random quality or preditability (or actually > > lack > > > of) is important. > > > > > > With time() you get a few bits, but you have to look somewhere else to > > > collect the rest of the bits to use. In an interactive environment, the > > > user is a great source of entrophy. Else, you really have to dig in and > > > look under every stone there is. Only remember that repeating the same > > > operation twice doesn't double the entrophy. Most of the time it doesn't > > > give a single bit extra... > > > > > > I don't write this to be difficult. It's just that there must be > > > absolutely no misconception that rand() and time() may be used for > > > cryptography or other fields where good random numbers and entrophy > > > are needed. > > > > > > Note: more comments inlined below. > > > > > > /Per W > > > > > > On Tue, 9 Nov 2004, Aitor Moreno wrote: > > > > > > > Yes.. I agree with you. Since time() doesn't generate true random > > > > numbers, with this EASY approach, better results are achieved... do > > > > you agree with me? > > > > > > See comments above - no extra entrophy added. > > > > > > > > > > > > Yes, of course this can happen.... but this introduces a noise in the > > > > resulting sequence. > > > > > > Not noise - as in randomnes. It only adds predictability, i.e. "hooks" > > > that may be used to figure out what extra code you are using to > > garble the > > > rand() function. > > > > > > > > > > > > Obviously... it is like trying to encrypt a java applet.... it is > > > > impossible, but with all the known techniques, you can make the attack > > > > more difficult, only for those attacks that know how to do it.... > > > > > > > > With this easy approach, you can add a real noise to the resulting > > > > sequence that makes the analysis more difficult... or isn't it?? > > > > > > As I mentioned above: A lot of people have tried obfuscation. I > > don't know > > > about anyone who have managed to survive a real hack attempt. > > > > > > > > > > > > And if it is small set of random numbers, with the proposed function, > > > > reseeding the sequence, and the interval between successive numbers is > > > > not trivial.... > > > > do you think that is harder or easier to perform the analysis? > > > > > > You need a random generator to make this strategy work. Then, you still > > > receive entrophy in a real slow way. And in the end, rand() in itself is > > > too bad to be helped by good entrophy > > > > > > > > > > > > and if it is used only for choose a random color for my background ? > > > > > > > > I know what you are comment... and all it is true... the true random > > > > numbers are difficult to obtain... And, like the topic was "true > > > > random numbers", I have to agree with that, because I think in the > > > > same way . > > > > > > > > But, a good approach for easy applications can be the proposed one in > > > > the first post or in the second one.... > > > > > > > > In all cryptographic books it is used to appear a chapter about > > this ... > > > > > > A good approach for easy applications that are not limited to selecting > > > the background color of a window is to pick the code available in these > > > chapters of the cryptographic books, or to just google for a download > > > site. Any other design decision either fails or requires extensive > > > statistics and cryptographics knowledge and may still backfire. > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.Net email is sponsored by: > > > Sybase ASE Linux Express Edition - download now for FREE > > > LinuxWorld Reader's Choice Award Winner for best database on Linux. > > > http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click > > <http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click> > > > _______________________________________________ > > > Dev-cpp-users mailing list > > > Dev...@li... > > <mailto:Dev...@li...> > > > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > > > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users > > > > > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: > Sybase ASE Linux Express Edition - download now for FREE > LinuxWorld Reader's Choice Award Winner for best database on Linux. > http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click > _______________________________________________ > Dev-cpp-users mailing list > Dev...@li... > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users > |
|
From: Roger F. <ra...@ha...> - 2004-11-10 09:04:23
|
Aloha from Honolulu, My browser (Mozilla) reports that it can't find that web site. I also tried pasting http// ahead of the www, but got the same non-result. Having followed this debate I'm curious. I hope you can post a better URL. Mahalo (Thank You), Roger Furer Rob Lawless wrote: > I am completely niave to this science of randomness but my college > lecturer > designed a program to generate true random numbers i am not aware of > the ins > & outs of how its done basically something to do with atmospheric noise > everything is explained on his website > www.random.org <http://www.random.org> > just thought i would mentions this seeing as you are getting into a pretty > heated debate :) > & as always have fun! > rob > ----- Original Message ----- > From: "Per Westermark" <pw...@ia... > <mailto:pw...@ia...>> > To: "Aitor Moreno" <ait...@gm... <mailto:ait...@gm...>> > Cc: <dev...@li... > <mailto:dev...@li...>> > Sent: Tuesday, November 09, 2004 8:09 PM > Subject: Re: [Dev-C++] true random numbers. > > > > There are already good random number generators with immensely much > better > > randomnes and immensely much longer sequences making them evilishly hard > > to follow. > > > > With a good entrophy to seed them - some of which I discussed in my > > previous mail - even a quite simle application can use good > cryptographic > > strength random numbers. > > > > Why invent an octagonal wheel when there are already true round wheels > > available out there on the net? > > > > Let's play a bit with the time() function - even if repeated a large > > number of times - doesn't create hardly any entrophy. Let's say you > get 10 > > bits of entrophy for the first call (i.e. a random time within a start > > window of 15 minutes). Each following call add an entrophy close to > zero. > > Let's say that you call time() on average every 60 seconds (2^6 > > alternatives), which might give you 6 bits of entrophy. To get 256 > bits of > > entrophy (a very lousy entrophy for encryption seed), you then need 40 > > calls within a 40 minute interval... For real entrophy, you should > > probably have at least 1024 or 2048 bits, which in this case > translates to > > a smapling interval of 150 to 300 minutes. > > > > Let's then look a bit closer at the above alternative. You have > still not > > specified how you should manage to make the individual "random" delays > > between each time() sample. If this isn't true random (which it can't be > > since you haven't even managed to get a real seed yet) and instead > > generated by calls to rand() (which is using a known algorithm and > have a > > very short sequence) then your 6 bits of entrophy for each 60 second > > window actually gets multiplied by 0, i.e. you are still at your initial > > 10 bits of entrophy from the 15-minute uncertainty of when the first > call > > was made. > > > > A large number of people have tried your approach in a number of > variants. > > Every one of them who have had their results stressed have fallen > through, > > i.e. the "randomnes" has been quickly shot to pieces. > > > > We are not talking about world-class cryptographic analysis to pick the > > above methods to pieces. More like a suitable programming exercise for > > project Euler: > > http://www.mathschallenge.net/index.php?section=project > > or maybe a home exercise for some courses at the university. > > > > - There are no ways to just algorithmically create randomnes. > > - There are good random number generators available freely. > > - For most environments, entrophy can be picked up from the system. > > > > Why then bother to try and do something that can't be done? Instead fix > > good random generator from the net. Fix reasonably good entrophy > from the > > system. Mix together and use. Takes less time than even thinking about > > inventing some smart methods for "garbling" the rand() sequence. > > > > time(), srand(), rand() etc are _only_ for selecting which attack a > moster > > should use, what color a screen saver should display etc. They can > not be > > used for anything where random quality or preditability (or actually > lack > > of) is important. > > > > With time() you get a few bits, but you have to look somewhere else to > > collect the rest of the bits to use. In an interactive environment, the > > user is a great source of entrophy. Else, you really have to dig in and > > look under every stone there is. Only remember that repeating the same > > operation twice doesn't double the entrophy. Most of the time it doesn't > > give a single bit extra... > > > > I don't write this to be difficult. It's just that there must be > > absolutely no misconception that rand() and time() may be used for > > cryptography or other fields where good random numbers and entrophy > > are needed. > > > > Note: more comments inlined below. > > > > /Per W > > > > On Tue, 9 Nov 2004, Aitor Moreno wrote: > > > > > Yes.. I agree with you. Since time() doesn't generate true random > > > numbers, with this EASY approach, better results are achieved... do > > > you agree with me? > > > > See comments above - no extra entrophy added. > > > > > > > > > Yes, of course this can happen.... but this introduces a noise in the > > > resulting sequence. > > > > Not noise - as in randomnes. It only adds predictability, i.e. "hooks" > > that may be used to figure out what extra code you are using to > garble the > > rand() function. > > > > > > > > > Obviously... it is like trying to encrypt a java applet.... it is > > > impossible, but with all the known techniques, you can make the attack > > > more difficult, only for those attacks that know how to do it.... > > > > > > With this easy approach, you can add a real noise to the resulting > > > sequence that makes the analysis more difficult... or isn't it?? > > > > As I mentioned above: A lot of people have tried obfuscation. I > don't know > > about anyone who have managed to survive a real hack attempt. > > > > > > > > > And if it is small set of random numbers, with the proposed function, > > > reseeding the sequence, and the interval between successive numbers is > > > not trivial.... > > > do you think that is harder or easier to perform the analysis? > > > > You need a random generator to make this strategy work. Then, you still > > receive entrophy in a real slow way. And in the end, rand() in itself is > > too bad to be helped by good entrophy > > > > > > > > > and if it is used only for choose a random color for my background ? > > > > > > I know what you are comment... and all it is true... the true random > > > numbers are difficult to obtain... And, like the topic was "true > > > random numbers", I have to agree with that, because I think in the > > > same way . > > > > > > But, a good approach for easy applications can be the proposed one in > > > the first post or in the second one.... > > > > > > In all cryptographic books it is used to appear a chapter about > this ... > > > > A good approach for easy applications that are not limited to selecting > > the background color of a window is to pick the code available in these > > chapters of the cryptographic books, or to just google for a download > > site. Any other design decision either fails or requires extensive > > statistics and cryptographics knowledge and may still backfire. > > > > > > > > ------------------------------------------------------- > > This SF.Net email is sponsored by: > > Sybase ASE Linux Express Edition - download now for FREE > > LinuxWorld Reader's Choice Award Winner for best database on Linux. > > http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click > <http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click> > > _______________________________________________ > > Dev-cpp-users mailing list > > Dev...@li... > <mailto:Dev...@li...> > > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users > > |
|
From: Rob L. <rob...@nt...> - 2004-11-10 01:49:57
|
I am completely niave to this science of randomness but my college = lecturer designed a program to generate true random numbers i am not aware of the = ins & outs of how its done basically something to do with atmospheric noise everything is explained on his website www.random.org just thought i would mentions this seeing as you are getting into a = pretty heated debate :) & as always have fun! rob ----- Original Message ----- From: "Per Westermark" <pw...@ia...> To: "Aitor Moreno" <ait...@gm...> Cc: <dev...@li...> Sent: Tuesday, November 09, 2004 8:09 PM Subject: Re: [Dev-C++] true random numbers. > There are already good random number generators with immensely much = better > randomnes and immensely much longer sequences making them evilishly = hard > to follow. > > With a good entrophy to seed them - some of which I discussed in my > previous mail - even a quite simle application can use good = cryptographic > strength random numbers. > > Why invent an octagonal wheel when there are already true round wheels > available out there on the net? > > Let's play a bit with the time() function - even if repeated a large > number of times - doesn't create hardly any entrophy. Let's say you = get 10 > bits of entrophy for the first call (i.e. a random time within a start > window of 15 minutes). Each following call add an entrophy close to = zero. > Let's say that you call time() on average every 60 seconds (2^6 > alternatives), which might give you 6 bits of entrophy. To get 256 = bits of > entrophy (a very lousy entrophy for encryption seed), you then need 40 > calls within a 40 minute interval... For real entrophy, you should > probably have at least 1024 or 2048 bits, which in this case = translates to > a smapling interval of 150 to 300 minutes. > > Let's then look a bit closer at the above alternative. You have still = not > specified how you should manage to make the individual "random" delays > between each time() sample. If this isn't true random (which it can't = be > since you haven't even managed to get a real seed yet) and instead > generated by calls to rand() (which is using a known algorithm and = have a > very short sequence) then your 6 bits of entrophy for each 60 second > window actually gets multiplied by 0, i.e. you are still at your = initial > 10 bits of entrophy from the 15-minute uncertainty of when the first = call > was made. > > A large number of people have tried your approach in a number of = variants. > Every one of them who have had their results stressed have fallen = through, > i.e. the "randomnes" has been quickly shot to pieces. > > We are not talking about world-class cryptographic analysis to pick = the > above methods to pieces. More like a suitable programming exercise for > project Euler: > http://www.mathschallenge.net/index.php?section=3Dproject > or maybe a home exercise for some courses at the university. > > - There are no ways to just algorithmically create randomnes. > - There are good random number generators available freely. > - For most environments, entrophy can be picked up from the system. > > Why then bother to try and do something that can't be done? Instead = fix > good random generator from the net. Fix reasonably good entrophy from = the > system. Mix together and use. Takes less time than even thinking about > inventing some smart methods for "garbling" the rand() sequence. > > time(), srand(), rand() etc are _only_ for selecting which attack a = moster > should use, what color a screen saver should display etc. They can not = be > used for anything where random quality or preditability (or actually = lack > of) is important. > > With time() you get a few bits, but you have to look somewhere else to > collect the rest of the bits to use. In an interactive environment, = the > user is a great source of entrophy. Else, you really have to dig in = and > look under every stone there is. Only remember that repeating the same > operation twice doesn't double the entrophy. Most of the time it = doesn't > give a single bit extra... > > I don't write this to be difficult. It's just that there must be > absolutely no misconception that rand() and time() may be used for > cryptography or other fields where good random numbers and entrophy > are needed. > > Note: more comments inlined below. > > /Per W > > On Tue, 9 Nov 2004, Aitor Moreno wrote: > > > Yes.. I agree with you. Since time() doesn't generate true random > > numbers, with this EASY approach, better results are achieved... do > > you agree with me? > > See comments above - no extra entrophy added. > > > > > > Yes, of course this can happen.... but this introduces a noise in = the > > resulting sequence. > > Not noise - as in randomnes. It only adds predictability, i.e. "hooks" > that may be used to figure out what extra code you are using to garble = the > rand() function. > > > > > > Obviously... it is like trying to encrypt a java applet.... it is > > impossible, but with all the known techniques, you can make the = attack > > more difficult, only for those attacks that know how to do it.... > > > > With this easy approach, you can add a real noise to the resulting > > sequence that makes the analysis more difficult... or isn't it?? > > As I mentioned above: A lot of people have tried obfuscation. I don't = know > about anyone who have managed to survive a real hack attempt. > > > > > > And if it is small set of random numbers, with the proposed = function, > > reseeding the sequence, and the interval between successive numbers = is > > not trivial.... > > do you think that is harder or easier to perform the analysis? > > You need a random generator to make this strategy work. Then, you = still > receive entrophy in a real slow way. And in the end, rand() in itself = is > too bad to be helped by good entrophy > > > > > > and if it is used only for choose a random color for my background ? > > > > I know what you are comment... and all it is true... the true random > > numbers are difficult to obtain... And, like the topic was "true > > random numbers", I have to agree with that, because I think in the > > same way . > > > > But, a good approach for easy applications can be the proposed one = in > > the first post or in the second one.... > > > > In all cryptographic books it is used to appear a chapter about this = ... > > A good approach for easy applications that are not limited to = selecting > the background color of a window is to pick the code available in = these > chapters of the cryptographic books, or to just google for a download > site. Any other design decision either fails or requires extensive > statistics and cryptographics knowledge and may still backfire. > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: > Sybase ASE Linux Express Edition - download now for FREE > LinuxWorld Reader's Choice Award Winner for best database on Linux. > http://ads.osdn.com/?ad_id=3D5588&alloc_id=3D12065&op=3Dclick > _______________________________________________ > Dev-cpp-users mailing list > Dev...@li... > TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm > https://lists.sourceforge.net/lists/listinfo/dev-cpp-users > |