Nathan Saper wrote:
> > The most common portable method of obtaining cryptographically strong
> > random numbers is to generate a seed using the HACK device. (Human At
> > Computer Keyboard :) I believe PGP relies on this method.
> This is probably a stupid question, but: What would be the best way to
> implement this sort of arrangement in Perl?

Ive given this some thought, and have decided that I would need to
know more about the specific nature of your application to answer.
Obviously, the timing of individual keystrokes is not available to a
perl script running on a remote webserver, which only sees a
form-submit as a single clump of data. Basically, with the requirement
for that level of interactivity, totally independant perl coding isnt
possible.

One could generate a seed from a hash of a user-supplied paragraph,
but I am not sure that this would be anywhere near random enough for
the generation of a 1024bit key... Requiring the user to type more
than that would be inconvienent to say the least...



-- 
jkenner @ mindspring . com__
I Support Linux:           _> _  _ |_  _  _     _|
Working Together To       <__(_||_)| )| `(_|(_)(_|
To Build A Better Future.       |                   <s>