On Mon, Jul 12, 2021 at 8:37 AM Steve Dower <steve.dower@python.org> wrote:

On 7/12/2021 4:11 PM, Dan Stromberg wrote:
> It looks like CPython could do better on Windows: SystemRandom (because
> of os.urandom()) is good on Linux and mac, but on Windows they use the
> CryptGenRandom deprecated API....
>
> Supporting detail:
> https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptgenrandom
> <https://docs.microsoft.com/en-us/windows/win32/api/wincrypt/nf-wincrypt-cryptgenrandom>
>
> Should I open an issue?

Please do, but note that the API is only deprecated because it was not
very extensible and the new API is much more comple... er... extensible.

There's nothing wrong with the randomness from the function. It'll be
using the new API under the covers. So this is an enhancement, not a
security issue, and should only target 3.11.

I created https://bugs.python.org/issue44611 for this.

_______________________________________________
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-leave@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at https://mail.python.org/archives/list/python-dev@python.org/message/C3QBAG3YHBJSJQ5MO32TFN6R6PBYKEKD/
Code of Conduct: http://python.org/psf/codeofconduct/