Re: Random String Generator

["Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>]

That is why IBM recommends using CIPHER's PRN to generate salt values for encrypted text. Given all the possible ways to make something accidently insecure, I'd rather use something that I can trust to be done correctly (or at least be able to call someone up and yell at them if it isn't) than come up with it myself.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Nathan Andelin
Sent: Tuesday, September 09, 2008 5:51 PM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] Random String Generator

> Walden H. Leverich wrote:
> I can still easily crack that by running all possible times into
> the random number generator until I find your sequence.

Would you have to run all possible times?  That would be a big number
(86,400,000,000 microseconds in a 24 hour period).

But the idea reminds me of cracking an encryption algorithm by running
streams of null characters through the encryption routine and looking
for a pattern in the result stream.  If the algorithm is strong, you
shouln't be able to see a pattern, even with just one key.

Nathan.