Pergunta

I'm using ECIES cryptography to send messages over the internet. For this method, a random key is generated for every message. The encryption key depends on this random key. Is it secure to use the same, not reseeded SecureRandom for the generation of multiple keys?

Foi útil?

Solução

Yes. A well designed SecureRandom will give random numbers that are completely unpredictable, meaning that if an attacker obtains one key pair, or a thousand key pairs, that will not help him in predicting the next key pair.

Reseeding your secure random will cost quite some time (depending where the actual random bits are coming from), so you do not want to reseed it to often.

Licenciado em: CC-BY-SA com atribuição
Não afiliado a StackOverflow
scroll top