| ▲ | Brybry 2 hours ago | |
Are you saying to take a hash of a picture and convert that to base 6 for your dice rolls to plug into a word list for creating a passphrase? Is that actually better (in practice, not in terms of entropy) than /dev/urandom? I have a lot less trust in my ability to successfully scrub a picture from my phone that deterministically created my passphrase. | ||
| ▲ | lisper 2 hours ago | parent | next [-] | |
> Is that actually better (in practice, not in terms of entropy) than /dev/urandom? It offers protection in the event that your /dev/urandom is compromised. Otherwise no. (Of course, if your /dev/urandom is compromised then whatever process you use to compute a hash of a photo is likely compromised as well.) | ||
| ▲ | Matumio 2 hours ago | parent | prev [-] | |
If you're concerned about that, you can concat your JPEG with a few bytes from /dev/random and you'll get the security of whichever is stronger. In practice none of this will be your weakest link. | ||