PHPOTP
PHPOTP copied to clipboard
Use more secure random for generateRandomClue
Modify generateRandomClue to use a source of true randomness from the openssl series of cryptographic functions. Anytime one is generating secrets that are critical to the functioning of the system security, a cryptographically secure random source should be used. The openssl function is not guaranteed to procedure a crypto secure random, but it should in the vast majority of implementations.