Skip to content

Commit 548e86c

Browse files
committed
Emphasise this even more, see #16
1 parent 13aa291 commit 548e86c

1 file changed

Lines changed: 5 additions & 6 deletions

File tree

dist/README.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,13 +20,12 @@ intend to not support anything else / intend to use a custom random fallback.
2020
### Including ISAAC PRNG as default random fallback
2121

2222
The Web Crypto API is fairly new and not supported by all / older browsers. For maximum compatibility this version
23-
includes [isaac.js](https://github.com/rubycon/isaac.js), a JavaScript implementation of the ISAAC PRNG, which is used
24-
as the default random fallback if neither node's crypto module nor the Web Crypto API is available.
23+
includes [isaac.js](https://github.com/rubycon/isaac.js), a JavaScript implementation of the ISAAC CSPRNG, in conjunction
24+
with an [entropy accumulator](https://github.com/dcodeIO/bcrypt.js/blob/master/src/bcrypt/prng/accum.js) for initial
25+
seeding, which are then used as the default random fallback if neither node's crypto module nor the Web Crypto API is
26+
available.
2527

26-
**Please note:** Seeding is performed using an [entropy accumulator](https://github.com/dcodeIO/bcrypt.js/blob/master/src/bcrypt/prng/accum.js)
27-
using multiple sources of randomness like mouse and touch movement, page load time, general timings and mixing in
28-
Math.random occasionally. Please consider taking a look at the accumulator to understand how it works for optimal
29-
results.
28+
**See also:** [fallback random number generators considered insecure](https://github.com/dcodeIO/bcrypt.js/issues/16)
3029

3130
* **[bcrypt-isaac.js](https://github.com/dcodeIO/bcrypt.js/blob/master/dist/bcrypt-isaac.js)**
3231
contains the commented source code.

0 commit comments

Comments
 (0)