PHPOTP icon indicating copy to clipboard operation
PHPOTP copied to clipboard

Use more secure random for generateRandomClue

Open alandgri opened this issue 5 years ago • 0 comments

Modify generateRandomClue to use a source of true randomness from the openssl series of cryptographic functions. Anytime one is generating secrets that are critical to the functioning of the system security, a cryptographically secure random source should be used. The openssl function is not guaranteed to procedure a crypto secure random, but it should in the vast majority of implementations.

alandgri avatar May 25 '20 17:05 alandgri