mirror of
https://github.com/Cockatrice/Cockatrice.git
synced 2026-09-24 18:33:03 -07:00
fd865c1ea9
Password salts and activation tokens were generated with the global SFMT RNG, which was seeded from a 32-bit timestamp, making registration salts and activation tokens predictable. The game RNG used the same timestamp seed across restarts. Add CryptoUtil backed by OpenSSL RAND_bytes and use it for salt/token generation and to seed RNG_SFMT with a 64-bit CSPRNG value in both the client and server. Link libcockatrice_utility against OpenSSL::Crypto. Took 30 seconds Took 25 minutes
32 lines
810 B
Docker
32 lines
810 B
Docker
FROM debian:13
|
|
|
|
RUN apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
ca-certificates \
|
|
ccache \
|
|
clang-format \
|
|
cmake \
|
|
file \
|
|
g++ \
|
|
git \
|
|
libgl-dev \
|
|
liblzma-dev \
|
|
libmariadb-dev-compat \
|
|
libprotobuf-dev \
|
|
libqt6multimedia6 \
|
|
libqt6sql6-mysql \
|
|
libssl-dev \
|
|
ninja-build \
|
|
protobuf-compiler \
|
|
qt6-image-formats-plugins \
|
|
qt6-l10n-tools \
|
|
qt6-multimedia-dev \
|
|
qt6-declarative-dev \
|
|
qt6-svg-dev \
|
|
qt6-shadertools-dev \
|
|
qt6-tools-dev \
|
|
qt6-tools-dev-tools \
|
|
qt6-websockets-dev \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|