Jacob Christian Munch-Andersen (nohatcoder@mastodon.gamedev.place)'s status on Thursday, 05-Mar-2026 05:51:32 JST

@f4grx @soatok There is this argument that even if a zero key is in some way bad, you don't really need to check if your rng produces all zeroes when generating a key, because the probability that this happens is so low as to be effectively impossible.

However, when you accept someone else's key as part of some interaction they could have maliciously set it to 0. It is not obvious that that bestows any major ability, but the threat analysis gets complicated, it is easier to just do the check.