rust-random / rust-random/rngs
Add the ability to create rand_xoshiro directly from the state
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 54
- Forks
- 43
- Avg merge
- 7d 3h
- Merged PRs (30d)
- 1
Description
We're currently passing verification from a lab for our secure PQC solution where we use xoshiro. During the code review they revealed that we shouldn't use bytes for randomization because they're vulnerable to template attacks. Each byte have only 255 variants and they can be distinguished between each other when measuring power consumption.
To avoid this, we need to construct xoshiro directly from the state (using u32). Would you be open to adding additional (non-trait) constructor that creates xoshiro from a state without constructing it byte by byte?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the xoshiro implementation and its existing constructors. Add the requested non-trait constructor that creates xoshiro directly from a state using u32 values, and verify that construction avoids byte-by-byte randomization.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cryptography
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100