← Entropy Atlas
Secret & unpredictable
Blinding values
Random masking prevents intermediate computations from exposing a secret through timing or power.
Evaluation card
What “plenty” means here.
- Required property
- Fresh values sampled from the exact mathematical domain expected by the blinding construction.
- If it fails
- Repeated or biased masks let measurements line up and can reveal secret-dependent behavior.
- Relevant attacker
- Someone measuring timing, power, electromagnetic leakage, or fault responses across operations.
- The Plenty Line
- Follow the implementation’s reviewed blinding design and source fresh values from a CSPRNG.
- Why more is not automatically better
- More bits do not help when masks are reused, sampled from the wrong range, or applied incompletely.
Where it appears
Recognize the pattern.
- 01RSA blinding
- 02masked cryptographic circuits
- 03privacy-preserving credentials
The Plentropy rule
Protect the requirement, then stop.
Follow the implementation’s reviewed blinding design and source fresh values from a CSPRNG.
Once that claim has comfortable evidence and margin, improve the next limiting factor instead of worshipping a larger entropy number.