Difference between revisions of "Projects/Alternative PRNG"
From K5Wiki
< Projects
(New page: {{project-early}} Current Kerberos implementation uses Yarrow-160 as a native PRNG. The goal of this project is to simplify the process of adoption of the alternative pseudorandom number...) |
m (Alternative PRNG moved to Projects/Alternative PRNG: move to Projects) |
(No difference)
| |
Revision as of 16:39, 18 December 2009
This is an early stage project for MIT Kerberos. It is being fleshed out by its proponents. Feel free to help flesh out the details of this project. After the project is ready, it will be presented for review and approval.
Current Kerberos implementation uses Yarrow-160 as a native PRNG. The goal of this project is to simplify the process of adoption of the alternative pseudorandom number generators such as HW accelerators, OS or any other cryptographically secure PRN generators that better suit the particular environment (depending on the type of hardware, system,configuration) and requirements (optimization, FIPS certification etc).
Functional Requirements
- Define PRNG implementation during configuration process
- Implement Fortuna PRNG
Design
Milestones
- Define the place of PRNG module inside crypto library structure. Adjust build system accordingly.
- Evaluate the existing implementations of Fortuna PRNG. Adapt the appropriate code or implement Fortuna PRNG based on the design doc. This will require SHA2 addition.
- Document basic instructions how to implement and plug in a new PRNG.
