Cockatrice/libcockatrice_rng
Lukas Brübach b142221e62 [Security] Use a CSPRNG for salts, tokens, and RNG seeding
Password salts and activation tokens were generated with the global SFMT
RNG, which was seeded from a 32-bit timestamp, making registration
salts and activation tokens predictable. The game RNG used the same
timestamp seed across restarts.

Add CryptoUtil backed by OpenSSL RAND_bytes and use it for salt/token
generation and to seed RNG_SFMT with a 64-bit CSPRNG value in both the
client and server. Link libcockatrice_utility against OpenSSL::Crypto.

Took 30 seconds
2026-08-10 22:23:56 +02:00
..
libcockatrice/rng [Security] Use a CSPRNG for salts, tokens, and RNG seeding 2026-08-10 22:23:56 +02:00
CMakeLists.txt [CI] Remove Qt5 (#7071) 2026-08-08 22:04:50 +02:00