A Pseudo-Random Number Generator (PRNG) uses the same seed each time the product is initialized.
Do not reuse PRNG seeds. Consider a PRNG that periodically re-seeds itself as needed from a high quality pseudo-random output, such as hardware devices.
Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems, or use the more recent FIPS 140-3 [REF-1192] if possible.
Our security experts can help you identify and remediate CWE-336 vulnerabilities in your codebase.
Get Security Assessment