3 ms·
This rant does more harm than good. Telling people not to use a library csprng is quite silly. Everything uses these and it's fine.
by lawnchair_larry 13y ago
This rant does more harm than good. Telling people not to use a library csprng is quite silly. Everything uses these and it's fine.
- tptacek 13y agoYeah I mean, there's probably never been a urandom-based vulnerability in ordinary software, and "library csprngs" are the reason every Debian SSH was compromised and the reason Android Bitcoin wallets were generating colliding keys, but sure. Everything's fine.