SecureRandom

Class Overview

This class generates cryptographically secure pseudo-random numbers.

Supported Algorithms

• SHA1PRNG: Based on SHA-1. Not guaranteed to be compatible with the SHA1PRNG algorithm on the reference implementation.

The default algorithm is defined by the first SecureRandomSpi provider found in the VM's installed security providers. Use Security to install custom SecureRandomSpi providers.

Seeding SecureRandom may be insecure

By default, instances of this class will generate an initial seed using an internal entropy source, such as /dev/urandom. This seed is unpredictable and appropriate for secure use.

You may alternatively specify the initial seed explicitly with the seeded constructor or by calling setSeed(byte[]) before any random numbers have been generated. Specifying a fixed seed will cause the instance to return a predictable sequence of numbers. This may be useful for testing but it is not appropriate for secure use.

It is dangerous to seed SecureRandom with the current time because that value is more predictable to an attacker than the default seed.

Calling setSeed(byte[]) on a SecureRandom after it has been used to generate random numbers (ie. calling nextBytes(byte[])) will supplement the existing seed. This does not cause the instance to return a predictable numbers, nor does it harm the security of the numbers generated.

Summary

[Expand] Inherited Methods
From class java.util.Random synchronized int next(int bits) Returns a pseudo-random uniformly distributed int value of the number of bits specified by the argument bits as described by Donald E. boolean nextBoolean() Returns a pseudo-random uniformly distributed boolean. void nextBytes(byte[] buf) Fills buf with random bytes. double nextDouble() Returns a pseudo-random uniformly distributed double in the half-open range [0.0, 1.0). float nextFloat() Returns a pseudo-random uniformly distributed float in the half-open range [0.0, 1.0). synchronized double nextGaussian() Returns a pseudo-random (approximately) normally distributed double with mean 0.0 and standard deviation 1.0. int nextInt(int n) Returns a pseudo-random uniformly distributed int in the half-open range [0, n). int nextInt() Returns a pseudo-random uniformly distributed int. long nextLong() Returns a pseudo-random uniformly distributed long. synchronized void setSeed(long seed) Modifies the seed using a linear congruential formula presented in The Art of Computer Programming, Volume 2, Section 3.2.1.
From class java.lang.Object Object clone() Creates and returns a copy of this Object. boolean equals( Object o) Compares this instance with the specified object and indicates if they are equal. void finalize() Invoked when the garbage collector has detected that this instance is no longer reachable. final Class<?> getClass() Returns the unique instance of Class that represents this object's class. int hashCode() Returns an integer hash code for this object. final void notify() Causes a thread which is waiting on this object's monitor (by means of calling one of the wait() methods) to be woken up. final void notifyAll() Causes all threads which are waiting on this object's monitor (by means of calling one of the wait() methods) to be woken up. String toString() Returns a string containing a concise, human-readable description of this object. final void wait() Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object. final void wait(long millis, int nanos) Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object or until the specified timeout expires. final void wait(long millis) Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object or until the specified timeout expires.