Insecure Randomness in JavaScript?

Asked Aug 13 '14 at 04:12

Active Sep 03 '14 at 01:14

Viewed 2,727 times

In my JavaScript I'm using var num = Math.round(Math.random() * 10);. It is working fine, but when I scan my code with the Fortify Static Code Analyzer, it reports an "Insecure Randomness" issue.

I know another method to generate random numbers is window.crypto.random(); but window.crypto is not supported in all browsers.

Can anybody explain how to fix this issue?

edited Sep 03 '14 at 01:14

J0e3gan

8,570
9
52
78

asked Aug 13 '14 at 04:12

tajMahal

Do you really need a secure random generator? – scunliffe Aug 13 '14 at 04:15
3

Are you using this random number to generate a private key? A password? If not, I think your security software is being a little bit paranoid. – stderr Aug 13 '14 at 04:15
http://stackoverflow.com/questions/4083204/secure-random-numbers-in-javascript – monkeyinsight Aug 13 '14 at 04:15
@scunliffe,yes i need secure random generator,could you please guide me. – tajMahal Aug 13 '14 at 04:16
@stderr,im generating random number one to nine. – tajMahal Aug 13 '14 at 04:18

Insecure Randomness in JavaScript?

0 Answers0