Bitcoin Forum
November 10, 2024, 10:55:25 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Other / Beginners & Help / Post request on: April 16, 2013, 04:40:51 PM
Long time lurker, but posting noob... so I was hoping to be able to post the following reply to https://bitcointalk.org/index.php?topic=77206.msg1152188#msg1152188 (I know it's old, but it has been referenced to in a number of newer posts).
-----
Quote from: Nimda
If we call SHA256 a pseudorandom generator G, we can test the bias of its outputs using any efficient algorithm A such that A(G(k <--R-- ??)) (the algorithm run on pseudorandom numbers) returns 0 with sufficiently higher probability (called the 'advantage') than A(r <--R-- {0, 1}n) (the algorithm run on truly random numbers).

http://www.fourmilab.ch/random/ looks promising. I'll be back.

There are a bunch of non-intuitive issues with randomness/entropy testing, which is a well-studied field, and there is no one (practical) single test that you can run that should satisfy you. The gold standard for many years was the Die Hard battery of tests by George Marsaglia (who discovered, among many other things in the field, that Linear Congruential Generators are of poor quality "randomness", which is basically why fast-but-decent PRNGs use Mersenne Twisters these days). The Die Hard battery was recently rewritten, added to and GPLed by Robert Brown, see here: http://www.phy.duke.edu/~rgb/General/dieharder.php

That said, John Walker (Fourmilab that you linked to) is great, and I used his HotBits about 15 years ago when it first came out, and I wanted "true" randomness (and afaik, nothing else online existed - or for a long time afterwards).
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!