Message 397339 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	strombrg
Recipients	paul.moore, steve.dower, strombrg, tim.golden, zach.ware
Date	2021-07-12.17:16:32
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1626110193.36.0.138157170892.issue44611@roundup.psfhosted.org>
In-reply-to

Content
CPython 3.9 uses CryptGenRandom(), which has been deprecated by Microsoft. I'm told the randomness produced by CryptGenRandom() is fine, but Microsoft has introduced a newer API for getting randomness. For these reasons, Python/bootstrap_hash.c should be updated to use https://docs.microsoft.com/en-us/windows/win32/seccng/cng-por , but it is not urgent, and is not needed in older versions of CPython. Also the documentation that references CryptGenRandom() should be updated, EG: https://docs.python.org/3/library/os.html#os.urandom

CPython 3.9 uses CryptGenRandom(), which has been deprecated by Microsoft.

I'm told the randomness produced by CryptGenRandom() is fine, but Microsoft has introduced a newer API for getting randomness.

For these reasons, Python/bootstrap_hash.c should be updated to use https://docs.microsoft.com/en-us/windows/win32/seccng/cng-por , but it is not urgent, and is not needed in older versions of CPython.

Also the documentation that references CryptGenRandom() should be updated, EG: https://docs.python.org/3/library/os.html#os.urandom

History
Date	User	Action	Args
2021-07-12 17:16:33	strombrg	set	recipients: + strombrg, paul.moore, tim.golden, zach.ware, steve.dower
2021-07-12 17:16:33	strombrg	set	messageid: <1626110193.36.0.138157170892.issue44611@roundup.psfhosted.org>
2021-07-12 17:16:33	strombrg	link	issue44611 messages
2021-07-12 17:16:32	strombrg	create