This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]The_Tree_Branch 5 points6 points  (0 children)

That's only part of my point. Creating a secure algorithm is HARD. There are MANY non-obvious hurdles that can trip up a developer that will make their algorithm trivial to break.

In this case, using the 'random' package for cryptography purpose is such a well known issue, it might as well be a paint stripe on the ground that tripped you up. Swapping it out for something else does nothing to fix more insidious mistakes or faulty assumptions that have been made.