Cockatrice/cockatrice
Lukas Brübach fd865c1ea9
[Security] Use a CSPRNG for salts, tokens, and RNG seeding
Password salts and activation tokens were generated with the global SFMT
RNG, which was seeded from a 32-bit timestamp, making registration
salts and activation tokens predictable. The game RNG used the same
timestamp seed across restarts.

Add CryptoUtil backed by OpenSSL RAND_bytes and use it for salt/token
generation and to seed RNG_SFMT with a 64-bit CSPRNG value in both the
client and server. Link libcockatrice_utility against OpenSSL::Crypto.

Took 30 seconds

Took 25 minutes
2026-08-30 19:28:37 +02:00
..
resources [App] Add onboarding wizard (#7064) 2026-08-24 23:05:58 +02:00
sounds Add cmake format (#4618) 2022-05-08 21:22:43 +02:00
src [Security] Use a CSPRNG for salts, tokens, and RNG seeding 2026-08-30 19:28:37 +02:00
themes Update CMakeLists.txt (#6898) 2026-05-17 16:15:15 +02:00
translations Update translation files (#7044) 2026-07-16 09:07:33 +02:00
.qdevelop icon_draw and icon_untap added, icon_general and icon_messages modified 2009-07-31 13:37:16 +02:00
CMakeLists.txt [UserList] Refactor: split dialog code to separate file (#7189) 2026-08-28 22:50:06 -07:00
cockatrice-cod.xml Define Cockatrice as an editor/handler for .cod files and cockatrice:// protocol on all platforms (#6775) 2026-08-08 19:02:19 +02:00
cockatrice.desktop Define Cockatrice as an editor/handler for .cod files and cockatrice:// protocol on all platforms (#6775) 2026-08-08 19:02:19 +02:00
cockatrice.qrc [App] Add onboarding wizard (#7064) 2026-08-24 23:05:58 +02:00
cockatrice.rc Included uninstaller for Windows version 2010-09-17 15:26:07 +02:00
cockatrice_en@source.ts Update translation source strings (#7028) 2026-07-01 16:25:10 +02:00