Category Archives: entropy

Say I have Math.random() (which supposedly generates ~32 bits of entropy.)
If I use Math.random() + Math.random(), both of them generate ~32 bits of entropy.

I will use the solution of Math.random() + Math.random() to seed a… Continue reading Is using multiple instances of a browser-PRNG to seed another PRNG more secure?→

I’m trying to compare two techniques for generating an OAuth 2 PKCE code_verifier.

For each character, get a random byte and “mod 66” to map to one of the 66 valid characters.
For each character, get a random byte and “mod … Continue reading Generating a secret token: security concerns other than min-entropy?→

Let’s say I need to generate a 32-character secret comprised of ASCII characters from the set ‘0’..’9′. Here’s one way of doing it:

VALID_CHARS = ‘0123456789’

generate_secret_string() {
random = get_crypto_random_bytes… Continue reading Determining the entropy of a string if each character has a slight bias→