[Python-ideas] Should our default random number generator be secure?
Steven D'Aprano
steve at pearwood.info
Thu Sep 10 03:27:07 CEST 2015
On Wed, Sep 09, 2015 at 04:09:21PM -0400, random832 at fastmail.us wrote:
> On Wed, Sep 9, 2015, at 15:07, Steven D'Aprano wrote:
> > Not really. Look at the subject line. It doesn't say "should we change
> > from MT to arc4random?", it asks if the default random number generator
> > should be secure. The only reason we are considering the change from MT
> > to arc4random is to make the PRNG cryptographically secure. "Secure" is
> > a moving target, what is secure today will not be secure tomorrow.
>
> Right, but we are discussing making it secure today.
No, *you* are discussing making it secure today. The rest of us are
discussing making it secure for all time.
--
Steve
More information about the Python-ideas
mailing list