A pseudorandom number generator (PRNG) is created with the integer seed specified in the code, which leads to the generation of a predictable sequence.

The work of many cryptographic algorithms is based on the use of cryptographically stable PRNGs. Some algorithms take as an additional argument the seed value and for each value of this parameter generate a predictable sequence. In this case, the security of the system is based on the assumption that the seed values will be unpredictable.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.

References

MEDIUM

Rust : Weak seed of random number generator

Classification

Overview

References

DerScanner Severity Score

Do you want to fix Rust : Weak seed of random number generator in your application?

See also

Rust : Buffer overflow

Rust : Empty salt

Rust : Hardcoded salt