News for hackers. Stuff that matters.

A comment on Exploit Information Leaks in Random Numbers from Python, Ruby and PHP. Parent comment

Re:Exploit Information Leaks in Random Numbers from Python, ... by wulczer on Wednesday December 05, 2012 @03:35PM (#4878415)
> (I'm pretty sure the same is true of Python, but I'm less confident of the specifics. I think this is a very fair issue to raise with PHP in general, though.)

Yeah, Python's random module uses MT, but you can use PyCrypto, which provides an API-compatible cryptographically secure module (PyCrypto.Random.random).

[ Parent | on HN ]
Re:Exploit Information Leaks in Random Numbers from Python, ... by inglesp on Wednesday December 05, 2012 @04:56PM (#4878818)
The Python docs[0] for the random module also state, quite clearly, that "the basic function random()... is completely unsuitable for cryptographic purposes".

[0] http://docs.python.org/3.3/library/random.html

[ Parent | on HN ]