Hi Peter, On Wed, Dec 23, 2020 at 5:01 PM Petr Tesarik <ptesarik@xxxxxxx> wrote: > I never suggested that this should serve as a supportive argument. I was just trying to be honest about our motivations. > > I'm a bit sad that this discussion has quickly gone back to the choice of algorithms and how they can be implemented. Why are you sad? You are interested in FIPS. FIPS indicates a certain set of algorithms. The ones most suitable to the task seem like they'd run into real practical problems in the kernel's RNG. That's not the _only_ reason I'm not keen on FIPS, but it does seem like a very basic one. Jason
