Hi Craig,

We have an implemntation of SecureRandom which I am very comfortable with.
It uses TripleDES to achieve a random distribution which should be very
close to random noise.  Chris worked on it based on the suggestions from
Bruce Schneier in "Practical Cryptography".

The major issue for me is not finding a random key, I'm ok with that, my
worry is how to protect that key inside the image, or how to append image
instance information to that key so that only the running image can retrieve
information encrypted with that key.

Basically I'm afraid of Spoon!  If you can copy my objects and move them,
then I need to protect against that by making sure decryption is dependent
on something unique to the instance of the running image.

Ron

> -----Original Message-----
> From: squeak-dev-bounces at lists.squeakfoundation.org [mailto:squeak-dev-
> bounces at lists.squeakfoundation.org] On Behalf Of Craig Latta
> Sent: Tuesday, August 22, 2006 7:32 PM
> To: squeak-dev at lists.squeakfoundation.org
> Subject: re: Image Unique Identifier
> 
> 
> Hi Ron--
> 
>      For what it's worth, there are random-number servers on the net. I
> like randomnumbers.org, since it uses a quantum process (photons through
> a semi-transmissive mirror). Or you could buy the PCI card they use[1]
> and run such a server yourself.
> 
> 
> -C
> 
> [1] http://www.idquantique.com/products/quantis.htm
> 
> --
> Craig Latta
> http://netjam.org/resume
> 
> 
>