The generation of random or pseudorandom data, and the use of randomness in security protocols
6
votes
4answers
4k views
License key / Serial number generator and checker
I need a serial number generator and accompanying checker. I would like to be able to set a salt (and maybe a length). The generator should only produce serial numbers that pass the test of the ...
10
votes
5answers
1k views
Do mobile OS's provide crypto-quality randomness?
Which mobile OS's provide a primitive to generate crypto-quality randomness that applications can use?
On desktop systems, these features are pervasive. Unix provides /dev/urandom. Windows provides ...
13
votes
3answers
2k views
How long should a random nonce be?
NIST provides good guidelines on the length of keys and hashes for various algorithms. But I don't see anything specifically on the length of a random or pseudo-random nonce (number used once).
If ...
26
votes
5answers
2k views
Are GUIDs safe for one-time tokens?
I see a lot of sites use GUIDs for password resets, unsubscribe requests and other forms of unique identification.
Presumably they are appealing because they are easy to generate, unique, ...
17
votes
8answers
4k views
Feeding /dev/random entropy pool?
Which way of additionally feeding /dev/random entropy pool would you suggest for producing random passwords? Or, is there maybe a better way to locally create fully random passwords?
