Personal tools
You are here: Home bugs good source of randomness in wallet

#1 — good source of randomness in wallet

State In progress
Area Wallet
Issue type Bug
Severity Medium
Submitted by Joerg Baach
Submitted on May 13, 2009
Responsible Joerg Baach
Return to tracker
Last modified on Jul 17, 2010 by Joerg Baach
Tags:
Right now the default pseudo random number generator of python is used in the wallet. There is no urandom, and python recommends not to use the random generator for crypto, which we do.
Added by Joerg Baach on May 13, 2009 11:26 PM
Issue state: UnconfirmedConfirmed
Responsible manager: (UNASSIGNED)jhb
Added by Joerg Baach on Jun 02, 2009 06:11 PM
Issue state: ConfirmedIn progress
Severity: CriticalMedium
Using the advice of http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/efaq.html and Nils there is now sha-256 used to improve usability of the random numbers. Right now this is done on all platforms, even those with a good random source.

The next step would be to use something fast, like e.g. mentioned in http://eprint.iacr.org/2005/165.pdf

No responses can be added.