SecureRandom vulnerability also for BouncyCastle C #

Today I heard (through the news) that Java SecureRandom is not random enough and that it can be predicted. Does this also apply to the implementation of SecureRandom in BouncyCastle C #?

Watch this news

+4
source share
1 answer

A recent weakness has been specifically identified in the Android SecureRandom implementation. Oracle JRE and OpenJDK have no vulnerabilities in their SecureRandom implementations, which are still unknown, as far as I can tell. It is worth noting that the implementation of SecureRandom will differ depending on where the JVM works (that is, Windows versus Unix-like)

EDIT: Excerpt from the link to the article you added, emphasizing mine.

The problem is that Androids has a built - in pseudo - random number generator, the SecureRandom Java class.

+3
source

Source: https://habr.com/ru/post/1497248/


All Articles