Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added source

...

While operating systems like OS X 10.6 keep the junk value, other systems like OS X 10.7 or 10.8 do not. The same code, when viewed in machine assembly, optimizes out the junk value leaving only the time and process id. In security protocols that rely on unpredictability like RSA encryption, a loss in entropy results in a less secure system [Wang 2012].

Compliant Solution

This can be solved by using a more reliable source for random number generation. This compliant solution uses the CPU clock in addition to the Real-Time clock to seed the random number generator.

...