Skip to content

chore: use robust RNG in cryptorand #8040

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Jun 17, 2023
Merged

chore: use robust RNG in cryptorand #8040

merged 6 commits into from
Jun 17, 2023

Conversation

ammario
Copy link
Member

@ammario ammario commented Jun 15, 2023

The past code was possibly correct, but prone to mistakes that would be very difficult to audit and unconver (e.g. #8022). This PR uses math/rand directly with a crypto/rand source, so we no longer maintain treachorous code.

As a bonus, we can remove a lot of code and simplify this package.

@ammario ammario linked an issue Jun 15, 2023 that may be closed by this pull request
@ammario ammario marked this pull request as ready for review June 15, 2023 15:00
@ammario ammario requested a review from kylecarbs June 15, 2023 15:01
@ammario ammario merged commit ca6b9e9 into main Jun 17, 2023
@ammario ammario deleted the rng-sec branch June 17, 2023 22:33
@github-actions github-actions bot locked and limited conversation to collaborators Jun 17, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

RNG
2 participants