Random Key generation help.

[rpk2006]

Hi,
In my application I have an empty frame on my form, in which I want users to move mouse randomly so as to generate random numbers, which will be used to generate keys.
Previously, I placed some labels with caption of different numbers and set the visible property to false. But, I noticed that this is not the standard, appropriate and secure way to generate numbers.
Any idea about how to gather random data?

Thanks,
.............
Rohit. ---------------------------------
Securing a computer system has traditionally been a battle of wits: the penetrator tries to find the holes, and the designer tries to close them. � M.Gosser

 

[pansophic]

Normally random numbers are generated using a crypt() or Rand() function. Because the Rand() function is time-based, it is generally better to create your number in a loop and call the Randomize() function each time you loop, then generate the Rand() value.

Are you generating for an encryption seed value or initialization vector?

Typically it is bad to store these values in a form because the form's handle can be enumerated and the text read from text boxes. I haven't attempted to do this with labels, but the theory should be the same.

What language/development suite are you using?
pansophic

 

[rpk2006]

Finally, I am able to generate random numbers from mouse movements, date, time etc., without using Labels in a form. Just random mouse movements are recorded.
I want to use this long random number to generate Session Key for my application, further, from which Private and Public Keys will be derived. ---------------------------------
Securing a computer system has traditionally been a battle of wits: the penetrator tries to find the holes, and the designer tries to close them. � M.Gosser