much of the advice on X of "generating your own entropy" is absolute dogshit that is going to get clueless people in trouble.
Solid hardware RNG sources are a solved issue in this context. Just make sure your code is actually.. using it.
Login to reply
Replies (2)
The problem is it's much harder for a user to check that a HWW "code is actually.. using it." vs. adding manual entropy.
Just use multiple sources (not xored). 5 sources, cause why not. After that, the only point left to check is the joining and hashing. A strong kdf wont hurt and it will slow the attacker down a lot, even in case of bad entropy.
But people want "fast" experience, cause waiting 1 minute for a kdf to run ONCE when generating is an immense pain the ass, right?
Short keys. Weak kdfs. Leaky HSMs and TPMs disguised as security and used as a user behavior control tool.
No. This not the way.