[gnukeyring-discuss] Random number generation

[Timm Murray<har...@ru...>]

I noticed on the GNU Keyring home page that the psedo-random number generat=
ion on PalmOS is probably insecure (being that PalmOS really isn't ment for=
 high-security, this doesn't surprise me).

I noticed in the "Welcome" program (the annoying program that starts up whe=
n you first use a PalmOS device) that it shows the exact pen stroke, right =
down to the pixel that recorded it, that was written in the graffiti area w=
hen it's having the user practice at graffiti (I have also head of Hackmast=
er applications that do similar things).  From this, I assume that somewher=
e in the PalmOS API, a programmer has the ability to get the raw input from=
 the graffiti area, and perhaps the entire screen.

Could this be used as a random number generator?  Just have the user scribl=
e a little in the graffiti area or on the screen and use the numbers as pas=
sword salt or as a seed for a PRNG.

-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCM/CS d- s+:-: a--- C+++ UL+++$ P+>P+++ L++>L++++ E--- W-- N+ !o K? w---=
=20
!O !M !V PS+ PE Y+(++) PGP@ t+(++) 5+(+++) X+@ !R tv b++ DI++++ D+=20
G e h! !r y?
------END GEEK CODE BLOCK------




-----------------------------------------------
Runbox Mail Manager - www.runbox.com
Free online email application