Commit e49a4d9
pseudo_bytes should use SecureRandom to match CRuby behavior
CRuby's OpenSSL::Random.pseudo_bytes is an alias for random_bytes (both
call RAND_bytes). JRuby was using java.util.Random which is not
cryptographically secure, silently weakening randomness for applications
porting from CRuby.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>1 parent 4cfc333 commit e49a4d9
1 file changed
Lines changed: 2 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
289 | 289 | | |
290 | 290 | | |
291 | 291 | | |
292 | | - | |
| 292 | + | |
| 293 | + | |
293 | 294 | | |
294 | 295 | | |
295 | 296 | | |
| |||
0 commit comments