You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
letmut shared = [0;16];// TODO: is this cryptographically secure enough?
rand::thread_rng().fill(&mut shared);
from the rand issue:
And an important note on security: we should aim to provide a secure source of random data, but ultimately it is up to users to decide how much they trust our implementation and what their risks are. thread_rng does not have the simplest code to review and is currently young and subject to further change. Also we may or may not implement forward secrecy (backtracking resistance), and for ultimate security solutions using no local state may be preferred.
which is closed, so I think you're the answer to the comment is "yes" - I should remove the comment
rust-random/rand#463
I think this issue solves that // Todo in src/server/mod.rs
The text was updated successfully, but these errors were encountered: