Seems good, it really is catastrophic with DSA.


On Thu, Feb 6, 2014 at 10:25 AM, Paul Kehrer <notifications@github.com>wrote:

> In docs/random-numbers.rst:
>
> > @@ -0,0 +1,20 @@
> > +Random number generation
> > +========================
> > +
> > +When generating random data for use in cryptographic operations, such as an
> > +initialization vector for encryption in
> > +:class:`~cryptography.hazmat.primitives.ciphers.modes.CBC` mode, you do not
> > +want to use the standard :mod:`random` module APIs. This is because they do not
> > +provide a cryptographically secure random number generator, resulting in
> > +various security issues in different algorithms.
>
> Should we be even more alarmist? e.g. replace "various security issues in
> different algorithms" with something like "major security issues depending
> on the chosen algorithm"?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/pyca/cryptography/pull/570/files#r9511683>
> .
>



-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084