phc-discussions - friendly warning about randomness tests

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <692938976.20140901225928@gmail.com>
Date: Mon, 1 Sep 2014 22:59:28 +0200
From: Krisztián Pintér <pinterkr@...il.com>
To: discussions@...sword-hashing.net
Subject: friendly warning about randomness tests

the diehard, testu01, dieharder, etc test suites are not cryptographic
tools. failing these tests is a clear break, and at least calls for
another postprocessing step (together with an assessment of actual
entropy content of the raw output). however, passing such tests mean
exactly nothing in crypto context.