News for hackers. Stuff that matters.

A comment on Exploit Information Leaks in Random Numbers from Python, Ruby and PHP. Parent comment

Re:Exploit Information Leaks in Random Numbers from Python, ... by Moto7451 on Wednesday December 05, 2012 @03:59PM (#4878550)
Very very minor nitpick/addendum to your point. Some languages let you swap out the rand function for a secure implementation. In those cases its important to make sure that that mechanism is actually in place.

In Perl for example:

http://search.cpan.org/~mkanat/Math-Random-Secure-0.06/lib/M...

[ Parent | on HN ]
Re:Exploit Information Leaks in Random Numbers from Python, ... by tptacek on Wednesday December 05, 2012 @04:22PM (#4878665)
Which is evil, because you want assessors and code reviewers to be able to quickly spot which RNG you're using.
[ Parent | on HN ]
Re:Exploit Information Leaks in Random Numbers from Python, ... by seats on Thursday December 06, 2012 @01:04AM (#4880500)
Not to mention wanting something to break if the secure implementation somehow were separated from the code using it (versus silently reverting to PRNG).
[ Parent | on HN ]