synapse/changelog.d/9984.misc at 6482075c95957ad980d9c1323f9f982e6f7aaff4 - mirrors/synapse - Sadium Git

mirrors/synapse

mirror of https://github.com/element-hq/synapse.git synced 2024-11-23 10:05:55 +03:00

Dan Callahan 498084228b

Use Python's secrets module instead of random (#9984 )

Functionally identical, but more obviously cryptographically secure.
...Explicit is better than implicit?

Avoids needing to know that SystemRandom() implies a CSPRNG, and
complies with the big scary red box on the documentation for random:

> Warning:
>   The pseudo-random generators of this module should not be used for
>   security purposes. For security or cryptographic uses, see the
>   secrets module.

https://docs.python.org/3/library/random.html

Signed-off-by: Dan Callahan <danc@element.io>

2021-05-14 10:58:46 +01:00

1 line

33 B

Text

Raw Blame History

Simplify a few helper functions.