[Python-ideas] Should our default random number generator be secure?

Sturla Molden sturla.molden at gmail.com
Mon Sep 14 22:56:05 CEST 2015


On 14/09/15 22:45, Robert Kern wrote:
> On 2015-09-14 20:07, Sturla Molden wrote:
>> On 14/09/15 19:15, M.-A. Lemburg wrote:
>>
>>> I am well aware that MT doesn't satisfy all empirical tests
>>> and also that it is not a CSPRNG
>>
>>> However, it has been extensively studied and it is proven to be
>>> equidistributed which is a key property needed for it to be used as
>>> basis for other derived probability distributions (as it done by the
>>> random module).
>>
>> And with this criterion, only MT and certain PCG generators are
>> acceptable.
>> Those are (to my knowledge) the only ones with proven equidistribution.
>
> Do not confuse k-dimensional equidistribution with "equidistribution".
> The latter property (how uniformly a single draw is distributed) is the
> one that the derived probability distributions rely upon, not the
> former.


Yes, there was something fishy about this. k-dimensional 
equidistribution matters if we simulate a k-dimensional tuple, as I 
understand it.

Sturla




More information about the Python-ideas mailing list