theverge.com/2021/4/13/22381321/…

QRNG ready phone.

With a CMOS sensor for randomness. Paul would like that I presume. I wonder what the advantage is over e.g. RDRAND though. The additional chip doesn't seem necessary. Samsung seems to be in love with the word quantum at the very least (QLED TV's and such - which seem to provide more precise colors, not necessarily better contrast).

If only I had quantum eyes to see those colors

We're having a bit of crypto confusion in the DMZ. 2 keys with 128 bits of entropy each adds up to 256 bits of entropy (ignoring meet in the middle), right?

do the keys are independently generated?

Or better how are they generated?

@kelalaka yes independent keys

Basically it started from forest's calculations here

I couldn't understand where (2^128)*2 came from and how it equals 2^130

Also is 2^(130/2) square root or half?

First, this is wrong 2^128*2 equals 2^130 it is 2^129

second, on average half, or 2^(130/2) this is not half this is a square root.

The possible keys are 2^(128*3), however, the VPN sees the first layer so there is 128-bit security against VPN. On average that has 127-bit.

@kelalaka Thanks!

@nobody If you'd concatenate them together or put them both as IKM into a KDF, then you'd have a 256 bit key. Given the right algorithm, you'd have 256 bit security :)

What I'm saying is that it depends how you'd use the keys.

@ConorMancone I'm saying that it depends how you'd use those keys. I'm not considering a specific use case. If you have 256 bits of randomness then more secure constructions than $2^{129}$ are definitely possible.

@kelalaka Are you saying that cracking 3 keys with 128 bits means cracking the equivalent of a 384 bit key? That's what it looks like you're saying with 2^(128*3), but that's not correct.

A 128 bit key has 2^128 = 3.402823669209385e+38 possible values

A 256 bit key has 2^256 = 1.157920892373162e+77 possible values

Therefore, 2 keys with 128 bits is not equal to a 256 bit key. 2 keys with 128 bits would be equivalent to a 129 bit key

(that would be 2*2^128, which, as you point out, is 2^129 or 129 bits of entropy)

@ConorMancone Correct me if I'm wrong. The VPN sees the three-layered onion right?

@MaartenBodewes using CMOS to read is not a bad idea.

@kelalaka I'm not saying that it is, and I was not using sarcasm in this case. If a USB CMOS based camera that tries to read "darkness" is another thing entirely if you ask me. Using a special chip for "quantum randomness" does seem overkill to me though.

@MaartenBodewes first step, some researches will by lots of phones to see the effect of the CMOS on the measure, Samsung benefits :)