Weak Random Number Generation

Detects the use of PRNGs (Pseudo-Random Number Generators) that are not cryptographically secure.

zakirkun Updated

File contents

Weak Random Number Generation

Overview

Detects the use of PRNGs (Pseudo-Random Number Generators) that are not cryptographically secure.

Remediation

Use cryptographically secure PRNGs (CSPRNG), like crypto/rand in Go, secrets in Python, or Crypto.getRandomValues in JS.

zakirkun/ice-tea/tree/main/skills/crypto/weak-random commit 431aa81b2a

Frequently asked questions

npx skillmds@latest add zakirkun/weak-random-number-generation