On Jul 24, 2013, at 10:45 PM, Yan Zhu <[1]yan@mit.edu> wrote:

     Has anyone tried using an entropy broker (see
     [2]https://lwn.net/Articles/546428/) for sharing entropy between
     devices on a physical network?
     [3]https://we.riseup.net/debian/entropy#entropy-key seems to suggest
     that this is something that people do.

   Some time ago, I ended up being a mentor in some coding thing.
   Vagueness is there to protect the guilty.

   The project in question was for some program to communicate using
   one-time pads. That the pad in a one-time-pad must be full-entropy is
   why it's relevant. The question came up of how you distribute the pads,
   because that's the key problem (nyuck, nyuck) in doing a one-time-pad
   system.

   The solution the person came up with was to encrypt them with PGP using
   a 4K-bit RSA key. I leave commentary on this system to the reader, and
   won't spoil the thought experiment with my own, at the moment.

   This entropy broker strikes me as exactly the same sort of
   understanding.

   Jon

References

   1. mailto:yan@mit.edu
   2. https://lwn.net/Articles/546428/
   3. https://we.riseup.net/debian/entropy#entropy-key