[issue27292] Warn users that os.urandom() prior to 3.6 can return insecure values

STINNER Victor report at bugs.python.org
Tue Sep 6 23:01:16 EDT 2016


STINNER Victor added the comment:

I dislike urandom-doc.v2.patch. There is no need to worry all users. Just be explicit and explain that the issue is specific to Linux and explain when it occurs: before the entropy pool is filled *and* if the system was not able yet to write enough entropy on disk, this thing:
https://www.python.org/dev/peps/pep-0524/#load-entropy-from-disk-at-boot

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue27292>
_______________________________________


More information about the Python-bugs-list mailing list