| ▲ | jstanley 2 hours ago | |
Can you clarify what you mean by "it is vastly more likely someone will actually try that key"? I'm guessing you don't think there are people calling rdrand in a loop and throwing away the output with high probability except when it is 0, but I can't see how else you imagine people would be vastly more likely to use the output when it is 0? | ||
| ▲ | ZiiS an hour ago | parent [-] | |
In lots of scenarios I know the software used to generate the key; the only unknown is the random numbers used. If I am searching for weaknesses it is highly likely I would try keys with different seeds; zero, one, are going to me much more likely choices here then hoping I can guess the right values. | ||