How good is security via hashing

Paul Rubin no.email at nospam.invalid
Tue Jun 7 22:30:26 EDT 2011


Christian Heimes <lists at cheimes.de> writes:
> PyCrypto has a strong pseudorandom number generator, too.

If you mean the one at pycrypto.org, that page now says:

    Random number generation

    Do not use RandomPool to generate random numbers. Use Crypto.Random
    instead. RandomPool is deprecated and will be removed in a future
    release. See this thread to find out why.

Crypto.Random just uses system randomness, which is the right thing to
do.  It then goes and runs them through a distiller (Fortuna), which
seems a little bit silly to me, but harmless.



More information about the Python-list mailing list