markbao/speakeasy — pull request #23 by kaosdynamics (2014-07-15 13:10:54+00:00)
Title: Use crypto.randomBytes as CSPRNG

As described in http://tools.ietf.org/html/rfc6238#section-5.1, you should rely on a cryptographically-secure random number generator that is what `crypto.randomBytes()` is.

`Math.random()` is not safe.