5 ms·

Very very minor nitpick/addendum to your point. Some languages let you swap out the rand function for a secure implementation. In those cases its important to m

Very very minor nitpick/addendum to your point. Some languages let you swap out the rand function for a secure implementation. In those cases its important to make sure that that mechanism is actually in place. In Perl for example: http://search.cpan.org/~mkanat/Math-Random-Secure-0.06/lib/Math/Random/Secure.pm http://search.cpan.org/~mkanat/Math-Random-Secure-0.06/lib/M...

tptacek 14y ago
Which is evil, because you want assessors and code reviewers to be able to quickly spot which RNG you're using.
- seats 14y ago
  Not to mention wanting something to break if the secure implementation somehow were separated from the code using it (versus silently reverting to PRNG).