synapse/changelog.d/9984.misc at 5bba1b49058a648197f217268a3978d8acf09c51 - mirrors/synapse - Code den of a Norwegian 🐻

mirrors/synapse

mirror of https://github.com/element-hq/synapse.git synced 2024-12-14 11:57:44 +00:00

Dan Callahan 498084228b

Use Python's secrets module instead of random (#9984 )

Functionally identical, but more obviously cryptographically secure.
...Explicit is better than implicit?

Avoids needing to know that SystemRandom() implies a CSPRNG, and
complies with the big scary red box on the documentation for random:

> Warning:
>   The pseudo-random generators of this module should not be used for
>   security purposes. For security or cryptographic uses, see the
>   secrets module.

https://docs.python.org/3/library/random.html

Signed-off-by: Dan Callahan <danc@element.io>

2021-05-14 10:58:46 +01:00

1 line

33 B

Text

Raw Blame History

Simplify a few helper functions.