...
Calling a PRNG in the same initial state, either without seeding it explicitly or by seeding it with the same value, results in generating the same sequence of random numbers in different runs of the program. Consider a PRNG function that is called 10 times consecutively seeded with some initial seed value and is consecutively called to produce a sequence of 10 random numbers with some seed value, and produces the sequence S = {r1, r2, r3, r4, r5, r6, r7, r8, r9, r10}
. If . If the PRNG is subsequently seeded with the same initial seed value, then it will generate the same sequence S
.
...
CERT C Secure Coding Standard | MSC30-C. Do not use the rand() function for generating pseudorandom numbers |
CERT C++ Secure Coding Standard | MSC32MSC51-CPP. Ensure your random number generator is properly seeded |
MITRE CWE | CWE-327, Use of a Broken or Risky Cryptographic Algorithm CWE-330, Use of Insufficiently Random Values |
...