3 ms·
if they are using SecureRandom backed by openssl then i think any instance is a problem. However, the 'seed' is used to augment the state and not override it. I
by benmmurphy 13y ago
if they are using SecureRandom backed by openssl then i think any instance is a problem. However, the 'seed' is used to augment the state and not override it. I'm not sure if it is possible or how much data would be required to get predictable output from SecureRandom by calling setSeed.
http://www.openssl.org/docs/crypto/RAND_add.html http://www.openssl.org/docs/crypto/RAND_add.html