Re: [dsfjdssdfsd] specifying an RNG

[Yaron Sheffer <[e-mail]>]

Hi Dan,

While I'm fully supportive of what you're out to achieve, I'm not clear 
on what it is :-)

Option A: specify requirements for an RNG (must mix multiple sources of 
randomness, must survive state disclosure, the output must not reveal 
the internal state for a standard attacker model, etc.)

Option B1: specify the deterministic part of an RNG, i.e. the crypto 
algorithm.

Option B2: specify the deterministic part, as well as the randomness 
sources (I'm avoiding the E word...).

Option A is important but most of us don't like requirements documents...

Option B1 is certainly fun, but traditionally such work has not been 
done in the IETF. In most cases we have recommended or adopted work done 
by other standards bodies or even individual cryptographers.

Option B2 is IMHO too OS-specific to be useful.

So which is it?

Thanks,
      Yaron