-
Type: Improvement
-
Resolution: Unresolved
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Internal Code, Security
-
None
-
Server Security
-
Fully Compatible
Work on SERVER-20919 suggested some improvements that could improve our random number generation infrastructure across the codebase.
The following points are some suggested improvements:
1) We should have a way to access OpenSSL's CSPRNG
2) We should have a way to obtain arbitrary byte arrays full of random values
3) We should have a templated method to produce random numbers of requested types
- is related to
-
SERVER-9058 Use FIPS-140-2 Approved Pseudorandom Number Generator for SecureRandom
- Backlog
-
SERVER-20919 Use OpenSSL to generate IVs
- Closed