Page History

CERT C Secure Coding Standard

MSC30-C. Do not use the {{ rand() }} function for generating pseudorandom numbers

CERT C++ Secure Coding Standard

MSC30-CPP. Do not use the {{ rand() }} function for generating pseudorandom numbers

MITRE CWE

CWE-327. Use of a broken or risky cryptographic algorithm

CWE-330. Use of insufficiently random values

CWE-332. Insufficient entropy in PRNG

CWE-336. Same seed in PRNG

CWE-337. Predictable seed in PRNG

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ad508380bad0ebed-438a2310-4416469f-a069984a-820542acb325e7025c681405"><ac:plain-text-body><![CDATA[

[[API 2006

AA. References#API 06]] 

[Class Random

http://java.sun.com/javase/6/docs/api/java/util/Random.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="08c4efc550a8faf1-cde0cc5b-46224519-af5d9b40-a338d2e9154e024f6824db8d"><ac:plain-text-body><![CDATA[

[[API 2006

AA. References#API 06]]

[Class SecureRandom

http://java.sun.com/javase/6/docs/api/java/security/SecureRandom.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e70e16d20ed1105d-fc30eee5-476b4013-bcbd8e08-1b5f3a775038382975784587"><ac:plain-text-body><![CDATA[

[[FindBugs 2008

AA. References#FindBugs 08]]

BC. Random objects created and used only once

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="95821802aff10b45-3f1fbfcf-486249cc-856286fc-e8eddde552ba839b229d05d2"><ac:plain-text-body><![CDATA[

[[Monsch 2006

AA. References#Monsch 06]]

]]></ac:plain-text-body></ac:structured-macro>