archives/snowflake
2
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git synced 2025-10-13 20:11:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use crypto/rand, not math/rand, to generate session IDs.

Browse source 
math/rand always uses a deterministic seed. The sequence of session IDs
was therefore always the same:
	Uv38ByGCZU8WP18PmmIdcg
	lWbHTRDYaB0NhtHpHgAWeQ
	...

Multiple copies of this program would have had session ID collisions. I
don't know what the consequences of that would be.
This commit is contained in:
David Fifield 2017-06-29 16:00:29 -07:00
parent af8a026991
commit faeb8da8c9
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
proxy-go/snowflake.go
View file

@ -8,7 +8,7 @@ import (
"io"
"io/ioutil"
"log"
"math/rand"
"crypto/rand"
"net"
"net/http"
"net/url"