3 ms·
Yes, but I don't see this as a good reason to drop all fast but not cryptogaphycally secure prng from which simulations can gain an advantage. Every exising too
by GTP 7y ago
Yes, but I don't see this as a good reason to drop all fast but not cryptogaphycally secure prng from which simulations can gain an advantage. Every exising tool can be misused, not providing the tool at all is an extreme measure that in this specific case I think wouldn't even solve the problem: if a programmer does the mistake to use a non crypto secure prng for cryptography is very likely that he will also do other mistakes like reusing nonces or leaking memory or other less trivial errors.
What I think is important is whenever somebody proposes a new prng to clearly state if it's cryptograpycally secure or not.