Page History

 CERT C Secure Coding Standard

MSC30-C. Do not use the rand() function for generating pseudorandom numbers

CERT C++ Secure Coding Standard

MSC30-CPP. Do not use the rand() function for generating pseudorandom numbers

MITRE CWE

CWE ID 327, "Use of a Broken or Risky Cryptographic Algorithm"

CERT C Secure Coding Standard  

CWE ID 330, "Use of Insufficiently Random Values"

CERT C++ Secure Coding Standard

MSC30-CPP. Do not use the rand() function for generating pseudorandom numbers

CWE ID 332, "Insufficient Entropy in PRNG"

CWE ID 333, "Improper Handling of Insufficient Entropy in TRNG"

CWE ID 336, "Same Seed in PRNG"

CWE ID 337, "Predictable Seed in PRNG"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="54b1ec9de6bea6d2-5bd7aa05-45f04c7f-937eb1ef-752947c3fef958cfe43cf91f"><ac:plain-text-body><![CDATA[

[[API 2006

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]] 

[Class Random

http://java.sun.com/javase/6/docs/api/java/util/Random.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="687bb97f963d348b-ddad58b4-47894dfe-862b9ebb-42749644e23012bcb0de190e"><ac:plain-text-body><![CDATA[

[[API 2006

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]]

[Class SecureRandom

http://java.sun.com/javase/6/docs/api/java/security/SecureRandom.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="aeb60ea4a0686d3b-6fc7f5fc-4484425e-9c1abbb6-3f8b45f72df6cdfac3216cda"><ac:plain-text-body><![CDATA[

[[Find Bugs 2008

https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-FindBugs08]]

BC: Random objects created and used only once

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="127400a9d0eaa7dd-c4374937-463b43db-9ebab883-879cc9035886b2abd54df953"><ac:plain-text-body><![CDATA[

[[Monsch 2006

AA. Bibliography#Monsch 06]]

]]></ac:plain-text-body></ac:structured-macro>