SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 82

changes.mady.by.user Will Snavely

Saved on

compared with

New Version 83

changes.mady.by.user Will Snavely

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

CERT C Secure Coding StandardMSC30-C. Do not use the rand() function for generating pseudorandom numbers
SEI CERT C++ Coding StandardMSC51-CPP. Ensure your random number generator is properly seeded
MITRE CWECWE-327, Use of a Broken or Risky Cryptographic Algorithm
CWE-330, Use of Insufficiently Random Values
CWE-331, Insufficient Entropy
CWE-338, Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Bibliography

[MSDN]"CryptGenRandom Function"

...