Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!feeder.news-service.com!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=LVhM6bjZ9CEhh1SDmEPAViL/wEdhbl4irjxxNBe7AEtlvZ6WoKi+4hkENV9rsHVY8T 50USb7WAqnOyrIp+1WcVO0FekjFhOeLr5p9Fc9C5jtDfL3EHm8YtblUGEFTtCAQ8mQNO 0UT/jZEXMGArmnB+ujxrhhQUixjIb7ci9jIRY=
MIME-Version: 1.0
In-Reply-To: <4DEDFAEB.4050006@chamonix.reportlab.co.uk>
References: <4DEDFAEB.4050006@chamonix.reportlab.co.uk>
Date: Tue, 7 Jun 2011 13:02:46 -0700
Subject: Re: How good is security via hashing
From: geremy condra <debatem1@gmail.com>
To: Robin Becker <robin@reportlab.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: python-list@python.org
Precedence: list
Newsgroups: comp.lang.python
Message-ID: <mailman.2542.1307476969.9059.python-list@python.org>
Lines: 38
NNTP-Posting-Host: 82.94.164.166
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:7180

On Tue, Jun 7, 2011 at 3:18 AM, Robin Becker <robin@reportlab.com> wrote:
> A python web process is producing files that are given randomized names of
> the form
>
> hhhhhh-YYYYMMDDhhmmss-rrrrrrrr.pdf
>
> where rrr.. is a 128bit random number (encoded as base62). The intent of the
> random part is to prevent recipients of one file from being able to guess
> the names of others.
>
> The process was originally a cgi script which meant each random number was
> produced thusly
>
>
> pid is process id, dur is 4 bytes from /dev/urandom.
>
> random.seed(long(time.time()*someprimeint)|(pid<<64)|(dur<<32))
> rrr = random.getrandbits(128)
>
>
> is this algorithm safe? Is it safe if the process is switched to fastcgi and
> the initialization is only carried out once and then say 50 rrr values are
> generated.

The advice you got about just using urandom seems to be the best
you're likely to get. Given how few values you have to pull out of
random.random to reconstruct its state, the progress that's been made
in the last few years on similar hidden state problems, and the
limited amount of entropy you're feeding it in the first place, I'd
probably stay away from this method. And besides,

# adds random junk to the filename- should make it hard to guess
rrr = os.urandom(16)
fname += base64.b64encode(rrr)

has to be easier to read and reason about than the process above.

Geremy Condra