3 ms·
Yes, so /dev/urandom is not suitable if you want "secure random numbers", because its output may be pseudorandom.
by swolchok 17y ago
Yes, so /dev/urandom is not suitable if you want "secure random numbers", because its output may be pseudorandom.
- tptacek 17y agoWhat a weird little subthread. urandom and random are both CSPRNGs --- the same CSPRNG, in fact --- the only difference between them is whether the device blocks to fetch more entropy. Go ahead and use /dev/random if that question freaks you out. Either way, don't rely on mt_random.