synapse/changelog.d/9984.misc at 5bba1b49058a648197f217268a3978d8acf09c51 - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-11-14 22:11:47 +01:00

Dan Callahan 498084228b

Use Python's secrets module instead of random (#9984 )

Functionally identical, but more obviously cryptographically secure.
...Explicit is better than implicit?

Avoids needing to know that SystemRandom() implies a CSPRNG, and
complies with the big scary red box on the documentation for random:

> Warning:
>   The pseudo-random generators of this module should not be used for
>   security purposes. For security or cryptographic uses, see the
>   secrets module.

https://docs.python.org/3/library/random.html

Signed-off-by: Dan Callahan <danc@element.io>

2021-05-14 10:58:46 +01:00

1 line

33 B

Text

Raw Blame History

Simplify a few helper functions.