Re: [tinydtls-dev] Secure Random Number Generator ?

[Olaf Bergmann <bergmann@xxxxxxx>]

Raul Fuentes <ra.fuentess.sam+tinyDTLS@xxxxxxxxx> writes:

> Another thing that will impact with the PRNG and tinydtls is the
> starting time. For motes and Linux's implementation, they are
> beginning with EPOCH 0 (January 1th, 1970 00:00:00.0). This mean that
> the cookies generated by TinyDTLS are, probably, vulnerable to
> repetition attacks. 

Actually, the random seed should not depend on the system time at
all. Usually, you would try to get some entropy from the radio interface
or similar. There also has been a discussion on the PRNG initializer
some time ago, cf. [1].

[1] https://sourceforge.net/p/tinydtls/tickets/32/

Grüße
Olaf