Hot answers tagged csprng
2
Well, it is quite possible to have a CSPRNG that uses MD5, or SHA-1, despite their known flaws. In fact, see Hash_DRBG with SHA-1 for an example that is officially endorsed by the US Government. They don't endorse it for MD5; however, they really don't endorse MD5 for any reason (except within the TLS key derivation function).
The problem with MD5 and ...
1
window.crypto.getRandomValues() is the best you can do. Unfortunately, at the time of writing, too many browsers don't support window.crypto.getRandomValues(): see Compatibility of window.crypto.getRandomValues().
The alternative is to use fallback methods. However, those fallback methods are kind've hacky, of dubious security, slow, and have other ...
Only top voted, non community-wiki answers of a minimum length are eligible
