Question about encrypting

[Dirty F]

If you encrypt something with Truecrypt it tells you to randomly move your mouse for as long as you want, the longer the better. So it's creating some random uhm..something...can someone explain this to me what this does exactly? I thought it was interesting.

[Vapid - BANNED FOR LIFE]

The algorithm is static so entropy is useful

http://en.wikipedia.org/wiki/Entropy_%28computing%29

[pimpware]

Entropy my friend, entropy...

[Barry-xlovecam]

Not really sure but it may be creating an encryption salt from the mouse positions?
http://en.wikipedia.org/wiki/Salt_%28cryptography%29

[u-Bob]

The algorithm is static so entropy is useful

http://en.wikipedia.org/wiki/Entropy_%28computing%29

Exactly. Truecrypt doesn't use your password "as-is", but performs some cryptographic operations on it. The (pseudo)random number generator, that's part of this operation, starts with a seed. If the seed was a well-known or predictable value (like the time the truecrypt volume was created), an attacker would be able to generate data that is identical to the data your Truecrypt install generated when it created the container. By moving your mouse around, you are creating data that the attacker cannot predict or reproduce.

[seeandsee]

How much is that secure?

[Vapid - BANNED FOR LIFE]

Truecrypt with hidden containers, long keys, and multiple algorithms would give the NSA's thinking machines second thoughts.

[u-Bob]

How much is that secure?

worst case: it will at least slow an attacker down a bit.

[Dirty F]

Cool, thanks.

[xanadu]

very interesting