Knowledge check

Random number generation: the primitive everything else depends on

10 questions testing what you just read — no login, no tracking, just immediate feedback.

Question 1 of 10

What must be true of a CSPRNG's output that isn't required of an ordinary statistical PRNG?

Question 2 of 10

What caused the 2008 Debian OpenSSL vulnerability?

Question 3 of 10

What was the actual flaw behind the 2010 Sony PlayStation 3 ECDSA key leak?

Question 4 of 10

Where does an operating system's CSPRNG get its initial unpredictability (entropy) from?

Question 5 of 10

What OS API should application code call to get cryptographically secure randomness on Linux or macOS?

Question 6 of 10

What Windows APIs provide cryptographically secure randomness?

Question 7 of 10

What does the module recommend application code do for randomness, rather than implementing its own generator?

Question 8 of 10

For roughly how long did the 2008 Debian OpenSSL vulnerability go undiscovered?

Question 9 of 10

How large was the pool of possible keys the flawed Debian OpenSSL package could generate?

Question 10 of 10

What's the difference between the 2008 Debian OpenSSL flaw and the 2010 Sony PS3 nonce issue?

0 / 10 answered