[Cryptography Team] Re: [squeak-dev] DigitalSignatureAlgorithm>>#initRandomNonInteractively is not random

Good, SecureRandom employs its #generateKey method (on the class side) to initialize its 'picker' (class-instance var). This was intended to serve as a globally usable SecureRandom so that clients like DigitalSignatureAlgorithm would not have to define their own.

On Sat, Aug 21, 2010 at 5:30 AM, Rob Withers reefedjib@gmail.com wrote:

I found a problem with DigitalSignatureAlgorithm>>#initRandomNonInteractively.  It is grabbing randomBits from the SoundSystem, but I may not have that installed.  It gave me the same bits repeatedly.  I modified DigitalSignatureAlgorithm>>#initRandomNonInteractively to not rely on the SoundSystem and instead use SecureRandom.  This is published in the Cryptography repository.

Rob