34 points | by ledoge 2 hours ago
8 comments
Rule #1 of rolling your own RNG: don’t.
Rule #2? Please don’t.
Wonderful.
it's like the weak hardware wallet entropy bug
You'd have to be completely off your rocker to use a PDF tool written in C anyway.
very VERY few people judge tools like this by the language used to develop them.
How many people judge their tools based on the AES key entropy?
What are the alternatives?
Genuine question, since I'm not very knowledgeable about this: why is using C for a PDF tool such a bad idea?
Rule #1 of rolling your own RNG: don’t.
Rule #2? Please don’t.
Wonderful.
it's like the weak hardware wallet entropy bug
You'd have to be completely off your rocker to use a PDF tool written in C anyway.
very VERY few people judge tools like this by the language used to develop them.
How many people judge their tools based on the AES key entropy?
What are the alternatives?
Genuine question, since I'm not very knowledgeable about this: why is using C for a PDF tool such a bad idea?