Avoid pseudo-random numbers This product is not supported for your selected
Datadog site . (
).
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter .
TRY THIS RULE ID: csharp-security/no-pseudo-random
Language: C#
Severity: Notice
Category: Security
CWE : 338
Description Avoid pseudo-random generator as they generate numbers that are easy to guess. Prefer more secure, cryptographic-friendly random generators.
Learn More Non-Compliant Code Examples class MyClass {
public static void routine ()
{
var random = new Random ();
var bytes = new byte [ 16 ];
var randomizeTwice = true ;
var randomizeThrice = false ;
random . NextBytes ( bytes );
if ( randomizeTwice ) {
random . NextBytes ( bytes );
}
if ( randomizeThrice ) {
new Random (). NextBytes ( bytes );
}
}
}
Compliant Code Examples using System.Security.Cryptography ;
class MyClass {
public static void routine ()
{
var random = RandomNumberGenerator . Create ();
byte [] randomData = new byte [ 4 ];
randomGenerator . GetBytes ( randomData );
}
}
Seamless integrations. Try Datadog Code Security
