Re:How to safely generate a random number
by lawnchair_larry on Wednesday February 26, 2014 @04:33AM
(#7303864)
This rant does more harm than good. Telling people not to use a library csprng is quite silly. Everything uses these and it's fine.
[ Parent
| on HN ]
Re:How to safely generate a random number
by tptacek on Wednesday February 26, 2014 @08:16AM
(#7304680)
Yeah I mean, there's probably never been a urandom-based vulnerability in ordinary software, and "library csprngs" are the reason every Debian SSH was compromised and the reason Android Bitcoin wallets were generating colliding keys, but sure. Everything's fine.