id,summary,reporter,owner,description,type,status,priority,milestone,component,version,resolution,keywords,cc
1,Where should the statistical tests be placed?,pchapin,pchapin,"There are two obvious possibilities: inside the Generator component or in the Library component. If the tests are in the generator they will be done regardless of if the library is present or not. This is more secure; if the library is secretly modified the tests in the generator will still detect degraded randomness.
On the other hand, the statistical tests are likely to be computationally expensive. It would be easier/better/faster to implement those tests in a library on the host computer than in an embedded environment. Anyway if an attacker can replace the library there are other security problems to worry about.
I believe the statistical tests should be in the Library.",discussion,closed,major,Statistical Tests,Library,,closed,,