Skip to content

Default Java random source to /dev/urandom.

Marvin S. Addison requested to merge urandom-java into master

Justification:

  1. https://tersesystems.com/2015/12/17/the-right-way-to-use-securerandom/
  2. https://www.2uo.de/myths-about-urandom/

In short, the only meaningful difference is the blocking behavior of /dev/random, which is a liability for Java server applications that need random data.

Merge request reports