{"id":89376,"date":"2018-11-25T13:30:05","date_gmt":"2018-11-25T18:30:05","guid":{"rendered":"http:\/\/rbach.net\/blog\/index.php\/"},"modified":"2022-08-23T15:51:30","modified_gmt":"2022-08-23T19:51:30","slug":"how-lava-lamps-secure-the-internet","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/how-lava-lamps-secure-the-internet\/","title":{"rendered":"How Lava Lamps Secure the Internet"},"content":{"rendered":"<p><a href=\"https:\/\/betanews.com\/2015\/08\/10\/security-is-weakened-because-random-numbers-are-not-random-enough\/\" target=\"_blank\" rel=\"entropy the wall noopener of noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignleft\" title=\"How Lava Lamps Secure the Internet\" src=\"https:\/\/i0.wp.com\/betanews.com\/wp-content\/uploads\/2015\/08\/random_numbers.jpg?resize=116%2C91&#038;ssl=1\" alt=\"How Lava Lamps Secure the Internet\" width=\"116\" height=\"91\" \/><\/a>The web performance and security company, <strong><a href=\"https:\/\/www.cloudflare.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Cloudflare<\/a><\/strong> provides security and domain name services for companies such as\u00a0<a href=\"http:\/\/www.cisco.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Cisco<\/a> (<a href=\"https:\/\/www.tradingview.com\/symbols\/NASDAQ-CSCO\/\" target=\"_blank\" rel=\"noopener noreferrer\">CSCO<\/a>),\u00a0 <a href=\"https:\/\/www.fitbit.com\/home\" target=\"_blank\" rel=\"noopener noreferrer\">FitBit<\/a>, <a href=\"https:\/\/www.okcupid.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">OKCupid<\/a>, <a href=\"\/\/www.uber.com\" target=\"_blank\" rel=\"noopener noreferrer\">Uber<\/a>, and <a class=\"inline_quotes\" href=\"https:\/\/www.zendesk.com\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-gdsid=\"149212\" data-inline-quote-symbol=\"ZEN\">Zendesk<\/a>. It serves a total of <strong>10 million website domains<\/strong> and the average Internet user touches its services around 500 times per day, according to its website.<\/p>\n<p><a href=\"https:\/\/www.cloudflare.com\/\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-89541 size-medium\" title=\"Cloudflare\" src=\"https:\/\/i0.wp.com\/rbachnet.wwwmi3-ss40.a2hosted.com\/wp-content\/uploads\/2018\/11\/cf-logo-v-rgb-1-150x50.jpg?resize=150%2C50\" alt=\"Cloudflare\" width=\"150\" height=\"50\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/2018\/11\/cf-logo-v-rgb-1.jpg?resize=150%2C50&amp;ssl=1 150w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/2018\/11\/cf-logo-v-rgb-1.jpg?resize=75%2C25&amp;ssl=1 75w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/2018\/11\/cf-logo-v-rgb-1.jpg?w=720&amp;ssl=1 720w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/a>The company hopes to leverage its solid reputation for its <strong>secure encryption<\/strong> into a 2019 <a href=\"https:\/\/www.cnbc.com\/2018\/10\/23\/cloudflare-prepares-for-3-billion-ipo.html\" target=\"_blank\" rel=\"noopener noreferrer\">$3.5 billion IPO.<\/a> Cloudflare&#8217;s reputation is based in part on a shelf full of <a href=\"https:\/\/www.smithsonianmag.com\/arts-culture\/the-history-of-the-lava-lamp-21201966\/\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>lava lamps<\/strong><\/a>.<\/p>\n<p>The <a href=\"https:\/\/www.youtube.com\/watch?v=3AtBTP0Hf4g\" target=\"_blank\" rel=\"noopener noreferrer\">lava lamps<\/a> in the lobby of Cloudflare&#8217;s <a href=\"https:\/\/www.google.com\/maps\/place\/101+Townsend+St,+San+Francisco,+CA+94107\/@37.7802849,-122.3904884,17z\/data=!3m1!4b1!4m5!3m4!1s0x808f7fd7f12dd59d:0xd23d2d244df0635c!8m2!3d37.7802849!4d-122.3904884\" target=\"_blank\" rel=\"noopener noreferrer\">San Francisco headquarters<\/a> ensure <strong>randomness<\/strong> for generating <a href=\"https:\/\/www.techopedia.com\/definition\/25403\/encryption-key\" target=\"_blank\" rel=\"noopener noreferrer\">encryption keys<\/a>. <a href=\"https:\/\/www.idquantique.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">ID Quantique<\/a> <a href=\"https:\/\/www.idquantique.com\/strong-encryption-keys\/\" target=\"_blank\" rel=\"noopener noreferrer\">explains<\/a> that the strength of any <a href=\"https:\/\/www.ibm.com\/support\/knowledgecenter\/en\/SSLTBW_2.1.0\/com.ibm.zos.v2r1.csfb500\/csfb5za206.htm\" target=\"_blank\" rel=\"noopener noreferrer\">cryptographic system<\/a> lies in its keys \u2013 the random stream of bits used by the cryptographic algorithm to transform plain text into ciphertext and back again.<\/p>\n<h3>Lava laps provide Internet security<\/h3>\n<p>The secret to a secure key is the amount of randomness, or entropy used to generate the key. <strong>The greater the degree of entropy, the more secure the key<\/strong> is. Because conventional <a href=\"https:\/\/www.sciencefocus.com\/future-technology\/can-a-computer-generate-a-truly-random-number\/\" target=\"_blank\" rel=\"noopener noreferrer\">computers cannot generate true randomness<\/a>, information from inputs such as mouse movements, disc interrupts, or system timers are all placed into a \u2018pool\u2019 of numbers, from which a \u2018<a href=\"https:\/\/en.wikipedia.org\/wiki\/Random_seed\" target=\"_blank\" rel=\"noopener noreferrer\">seed<\/a>\u2019 is picked. This \u2018seed\u2019 is then used in the <a href=\"https:\/\/whatis.techtarget.com\/definition\/pseudo-random-number-generator-PRNG\" target=\"_blank\" rel=\"noopener noreferrer\">pseudo-random number generation<\/a> (PRNG) which generates the keys.<\/p>\n<p>Instead of using mouse movements, disc interrupts or system timers, Cloudflare <strong>videotapes<\/strong> its wall of colorful constantly morphing <strong>lava lamps<\/strong> and translates that video information into <strong>unique cryptographic keys<\/strong>. The lava lamps work because fluid dynamics are hard, and no one has figured out how to predict the movements inside a lava lamp, let alone a wall of them. That means the random numbers being used in Cloudflare\u2019s encryption are effectively random.<\/p>\n<p>Nick Sullivan, Cloudfare&#8217;s head of cryptography, <a href=\"https:\/\/youtu.be\/1cUUfMeOijg\" target=\"_blank\" rel=\"noopener noreferrer\">explained<\/a> that instead of relying on code to generate these numbers for cryptographic purposes, the lava lamps and the random lights, swirling blobs, and movements are recorded and photographs are taken. This footage is then turned into a &#8220;stream of random, unpredictable bytes.&#8221; According to Mr. Sullivan, &#8220;&#8230; t<em>his unpredictable data is what we use to help create the keys that encrypt the traffic that flows through Cloudflare&#8217;s network.&#8221;<\/em><\/p>\n<p><a href=\"https:\/\/www.fastcompany.com\/90137157\/the-hardest-working-office-design-in-america-encrypts-your-data-with-lava-lamps\" target=\"_blank\" rel=\"cloudflare entropy noopener of wall noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" title=\"Cloudflare wall of entropy\" src=\"https:\/\/i0.wp.com\/images.fastcompany.net\/image\/upload\/w_596%2Cc_limit%2Cq_auto%3Abest%2Cf_auto\/wp-cms\/uploads\/sites\/4\/2017\/08\/4-this-security-firms-office-design-adds.jpg?resize=446%2C251&#038;ssl=1\" alt=\"Cloudflare wall of entropy\" width=\"446\" height=\"251\" \/><\/a><\/p>\n<p>Mr. Sullivan continued,<\/p>\n<p style=\"padding-left: 30px;\"><em>Every time you take a picture with a camera there&#8217;s going to be some sort of static, some sort of noise,&#8221; . &#8220;So it&#8217;s not only just where the bubbles are flowing through the lava lamp; it is the state of the air, the ambient light &#8212; every tiny change impacts the stream of data.<\/em><\/p>\n<p>The information is then fed into a data center and Linux kernels which then seed random number generators used to create keys to encrypt traffic.<\/p>\n<p><strong><em>rb-<\/em><\/strong><\/p>\n<p><em>Who didn&#8217;t have a lava lamp in college? Not only is Cloudflare&#8217;s wall of entropy fun, but it makes it harder for bad actors to break encryption.<\/em><\/p>\n<p><a href=\"https:\/\/retrorenovation.com\/2015\/10\/22\/lava-lamp-history\/\" target=\"_blank\" rel=\"groovy lamp lava noopener vintage noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" title=\"groovy vintage lava lamp\" src=\"https:\/\/i0.wp.com\/retrorenovation.com\/wp-content\/uploads\/2015\/10\/Lava-lamp-consort-retro.jpg?resize=389%2C524&#038;ssl=1\" alt=\"groovy vintage lava lamp\" width=\"389\" height=\"524\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<h6>Related articles<\/h6>\n<ul>\n<li><a href=\"https:\/\/www.howtogeek.com\/183051\/htg-explains-how-computers-generate-random-numbers\/\" target=\"_blank\" rel=\"noopener noreferrer\">How Computers Generate Random Numbers<\/a> (<a href=\"https:\/\/www.howtogeek.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">How-to Geek<\/a>)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><em><a title=\"Ralph Bach\" href=\"https:\/\/rbach.net\/index.php\/new-resume\/\" target=\"_blank\" rel=\"noopener noreferrer\">Ralph Bach<\/a>\u00a0has been in IT long enough to know better and has blogged from his\u00a0<a title=\"Bach Seat\" href=\"https:\/\/rbach.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">Bach Seat<\/a> about IT, careers, and anything else that catches his attention since 2005. You can follow him on <a class=\"broken_link\" href=\"http:\/\/www.linkedin.com\/in\/rb48334\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">LinkedIn<\/a>,\u00a0<a href=\"https:\/\/www.facebook.com\/ralph.bach.14\" target=\"_blank\" rel=\"noopener noreferrer\">Facebook<\/a>,\u00a0and\u00a0<a href=\"https:\/\/twitter.com\/rbach48334\" target=\"_blank\" rel=\"noopener noreferrer\">Twitter<\/a>. Email the Bach Seat\u00a0<a href=\"mailto:\/\/bach.seat@gmail.com\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ISP Cloudflare uses groovy lava lamps yo provide the randomness needed to secure internet and web traffic from attacks.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[3046,3122,824,3124,3123,4],"class_list":["post-89376","post","type-post","status-publish","format-standard","hentry","category-security","tag-3046","tag-cloudflare","tag-encryption","tag-entropy","tag-lava-lamp","tag-security"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/89376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/comments?post=89376"}],"version-history":[{"count":7,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/89376\/revisions"}],"predecessor-version":[{"id":129035,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/89376\/revisions\/129035"}],"wp:attachment":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/media?parent=89376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/categories?post=89376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/tags?post=89376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}