I'm not sure... I'm still researching.

I found this:

2013 - Google confirmed that the IBM Java SecureRandom class in Java Cryptography Architecture (JCA) generated repetitive (and therefore predictable) sequences, which compromised application security made for Android to support the electronic currency Bitcoin – the equivalent of USD large amount in Bitcoins10,11 was stolen. (NOTE: The Java version is not mentioned.)
https://www.nature.com/articles/s41598-021-95388-7

and this:

SHA1PRNG is a pure Java implementation, that may or may not use /dev/[u]random, depending on the java.security.egd System property or securerandom.source Security property.... SHA1PRNG is an old method, unless there is an obvious reason or unless you definitely know what you are doing, it should not be used in production.
https://metebalci.com/blog/everything-about-javas-securerandom/

Which makes me think that it may not be possible to use Java's SecureRandom SHA1PRNG implementation (like the listed jnanoid library does) to generate a nanoid. (Does jnanoid use hardware random generator? source)

ColdFusion server environments may vary link as well as the version of Java used. I may need to rewrite the function to support different security classes, but I'm attempting to use regular CFML so that nothing additional has to be installed and/or configured.

Uh oh!

Ported to ColdFusion/CFML #311

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions