Investigate using secure random to avoid false positives for non-crypto related code

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Unknown
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      We occasionally get reports of security problems from naive security scanners about using weak hash functions (md5) or pseudo random number generators (anything in the stdlib random module), even though the code in question has nothing to do with security or cryptography. Investigate using secure random (SystemRandom) and functions in the secrets module to avoid false positives for non-crypto related code.

            Assignee:
            Unassigned
            Reporter:
            Shane Harvey
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: