7

I am looking for a cryptographically secure number generator for node.js. Afaik. Math.random() does not meet these requirements. Is there any nodejs lib which can generate cryptographically secure numbers?

11

You are correct that Math.random() is not secure. If you want a CSPRNG in Node.js, crypto.randomBytes() is what you're looking for.

2

There are a few libs available, but I need to be certain whether they are really true random.

Any one who considers arithmetical methods of producing random digits is, of course, in a state of sin.

Basically, no library can generate any "really true random"s. Lately some processors include support for hardware RNGs, which allows (hopefully) "really true random"s to be generated.

That being said, there are -very- few applications for which a CSPRNG will not suffice. In fact, CSPRNGs offer such good quality randomness that I can't think of any.

  • Thanks! Then it was a misunderstanding. What I meant is cryptographically secure instead of true random. – inf3rno Dec 6 '16 at 6:20
  • I edited the question. – inf3rno Dec 6 '16 at 11:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.