reqwless
reqwless copied to clipboard
u64 random seed is not enough entropy for TLS.
reqwless requests a u64 from the user and uses it to seed a ChaCha8Rng for TLS.
https://github.com/drogue-iot/reqwless/blob/311060f9dcfe065941fa224139786fe3c205e71b/src/client.rs#L157
64 bits is not enough entropy to make TLS secure. The seed should be larger, or ideally the user would pass the RNG directly.