We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ad683c1 commit 24241fdCopy full SHA for 24241fd
src/scalar-crypto.adoc
@@ -4657,7 +4657,7 @@ SP 800-90C cite:[BaKeRo:21] states that each conditioned block of n bits
4657
is required to have n+64 bits of input entropy to attain full entropy.
4658
Hence NIST SP 800-90B cite:[TuBaKe:18] min-entropy assessment must
4659
guarantee at least 128 + 64 = 192 bits input entropy per 256-bit block
4660
-( cite:[BaKeRo:21], Sections 4.1. and 4.3.2 ).
+(cite:[BaKeRo:21], Sections 4.1. and 4.3.2).
4661
Only then a hashing of 16 * 16 = 256 bits from the entropy source
4662
will produce the desired 128 bits of full entropy. This follows from
4663
the specific requirements, threat model, and distinguishability proof
0 commit comments