Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > gnu.bash.bug > #14889 > unrolled thread

Re: $RANDOM not Cryptographically secure pseudorandom number generator

Started byGreg Wooledge <wooledg@eeg.ccf.org>
First post2018-12-03 12:35 -0500
Last post2018-12-03 12:35 -0500
Articles 1 — 1 participant

Back to article view | Back to gnu.bash.bug

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Re: $RANDOM not Cryptographically secure pseudorandom number generator Greg Wooledge <wooledg@eeg.ccf.org> - 2018-12-03 12:35 -0500

#14889 — Re: $RANDOM not Cryptographically secure pseudorandom number generator

FromGreg Wooledge <wooledg@eeg.ccf.org>
Date2018-12-03 12:35 -0500
SubjectRe: $RANDOM not Cryptographically secure pseudorandom number generator
Message-ID<mailman.5093.1543858570.1284.bug-bash@gnu.org>
On Mon, Dec 03, 2018 at 05:31:18PM +0100, Ole Tange wrote:
> Luckily I did not just assume that Bash delivers high quality random
> numbers, but I read the source code, and then found that the quality
> was low. I do not think must users would do that.

You're correct.  Most users would not have to read the source code to
know that the built-in PRNG in bash (or in libc, or in basically ANY
other standard thing) is of lower than cryptographic quality.

Most users already KNOW this.

[toc] | [standalone]


Back to top | Article view | gnu.bash.bug


csiph-web