File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -20,13 +20,12 @@ intend to not support anything else / intend to use a custom random fallback.
2020### Including ISAAC PRNG as default random fallback
2121
2222The Web Crypto API is fairly new and not supported by all / older browsers. For maximum compatibility this version
23- includes [ isaac.js] ( https://github.com/rubycon/isaac.js ) , a JavaScript implementation of the ISAAC PRNG, which is used
24- as the default random fallback if neither node's crypto module nor the Web Crypto API is available.
23+ includes [ isaac.js] ( https://github.com/rubycon/isaac.js ) , a JavaScript implementation of the ISAAC CSPRNG, in conjunction
24+ with an [ entropy accumulator] ( https://github.com/dcodeIO/bcrypt.js/blob/master/src/bcrypt/prng/accum.js ) for initial
25+ seeding, which are then used as the default random fallback if neither node's crypto module nor the Web Crypto API is
26+ available.
2527
26- ** Please note:** Seeding is performed using an [ entropy accumulator] ( https://github.com/dcodeIO/bcrypt.js/blob/master/src/bcrypt/prng/accum.js )
27- using multiple sources of randomness like mouse and touch movement, page load time, general timings and mixing in
28- Math.random occasionally. Please consider taking a look at the accumulator to understand how it works for optimal
29- results.
28+ ** See also:** [ fallback random number generators considered insecure] ( https://github.com/dcodeIO/bcrypt.js/issues/16 )
3029
3130* ** [ bcrypt-isaac.js] ( https://github.com/dcodeIO/bcrypt.js/blob/master/dist/bcrypt-isaac.js ) **
3231 contains the commented source code.
You can’t perform that action at this time.
0 commit comments