The output of 14 independent generators, each one initialized by its own random 320 bit key, is combined to generate the random output. The 4,480 bit sized seed to initialize the generators is derived from mouse movements and process time measurements of these movements. It requires 6 passes or 26,880 bits to complete the pool of seed bits. Seed depth is 4.11*101348. Every 17 to 23 output characters, between 3 and 13 characters are skipped. How many output is skipped, and where this occurs, depends on random values that are generated by a mix of two independent generators. The lack of some 50 percent of the output makes cryptanalysis of the complete output infeasible. After initialization, the first 3000 up to 4000 generated values are discarded to obscure any relation between seed and ouput. The exact number varies and depends on the number of randomly skipped outputs. After a maximum of 100,000 characters, the generators require initialization with a new seed. The Numbers software passes all statistical random number generator tests as prescribed in NIST's FIPS-PUB-140-1 regarding the security requirements for cryptographic modules. Although using a CSPRNG theoretically never achieves Shannon's perfect secrecy, it will be useful in practice to generate one-time pads. The huge size and the limited use of a given random seed, the astronomical number of possible generator states, the whitening by combining 14 generators and the irregular partial use of the output make it infeasible to retrieve or predict the generated output. However, if you want to increase its security even more, you can load and mix multiple external files with randomness (mp3, wav, jpg, bmp...), or even true random (hardware RNG's) to generate real one-time pads for unbreakable encryption. Numbers 8.2 is therefore a good software alternative to generate one-time pads. Runs on Windows™
98/ME/2000/XP/Vista/Win7 and with WINE on Linux or
Parallels Desktop on MAC. All feedback, suggestions or comments are most welcome by e-mail or by visiting the Guestbook.
|