search

ipfs-shipyard / java-ipfs-http-client

A Java implementation of the HTTP IPFS API
MIT License
538 stars 243 forks source link

SecureRandom used instead of Random. #141

Closed kamaci closed 5 years ago

kamaci commented 5 years ago

As the java.util.Random class relies on a pseudorandom number generator, this class and relating java.lang.Math.random() method should not be used for security-critical applications or for protecting sensitive data. In such context, the java.security.SecureRandom class which relies on a cryptographically strong random number generator (RNG) should be used in place.

ianopolous commented 5 years ago

Multipart doesn't need cryptographically secure randomness.