...
MSC02-EX1: Using the default constructor for java.util.Random applies a seed value that is "very likely to be distinct from any other invocation of this constructor" (API 2006), and may improve security marginally. ThereforeAs a result, it may only be used for non-critical applications operating on non-sensitive data. Java's default seed uses the system's time in milliseconds. When used, explicit documentation of this exception is required.
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="792416921e62867c-aef4b18a-42a94675-a705b310-e7a8f2d5654baa330ca25e44"><ac:plain-text-body><![CDATA[ | [[MITRE 2009 | AA. Bibliography#MITRE 09]] | [CWE ID 330 | http://cwe.mitre.org/data/definitions/330.html] "Use of Insufficiently Random Values" | ]]></ac:plain-text-body></ac:structured-macro> |
| CWE ID 327 "Use of a Broken or Risky Cryptographic Algorithm" | ||||
| CWE ID 330 "Use of Insufficiently Random Values" | ||||
| CWE ID 333 "Improper Handling of Insufficient Entropy in TRNG" | ||||
| CWE ID 332 "Insufficient Entropy in PRNG" | ||||
| CWE ID 337 "Predictable Seed in PRNG" | ||||
| CWE ID 336 "Same Seed in PRNG" |
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="dfef7ceb13b7e4ff-53233528-487a4ede-b7b38e2b-fb0d7e03b1fc7e99a7fb00b7"><ac:plain-text-body><![CDATA[ | [[API 2006 | https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]] | [Class Random | http://java.sun.com/javase/6/docs/api/java/util/Random.html] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="519a1016d6ebb4b0-fcfd1fb4-47744d8d-808ab1c1-bb6549f5a3834ace681eb2ad"><ac:plain-text-body><![CDATA[ | [[API 2006 | https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-API06]] | [Class SecureRandom | http://java.sun.com/javase/6/docs/api/java/security/SecureRandom.html] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="17f832518d99c652-67373326-4ea54652-a342934a-bc0841325c1ce2458d86ec4b"><ac:plain-text-body><![CDATA[ | [[Find Bugs 2008 | https://www.securecoding.cert.org/confluence/display/java/AA.+Java+References#AA.JavaReferences-FindBugs08]] | BC: Random objects created and used only once | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="cec45c09094790b0-e729b5b6-4f424c65-ba688633-8fcc0b2d8d5962dca707f831"><ac:plain-text-body><![CDATA[ | [[Monsch 2006 | AA. Bibliography#Monsch 06]] |
| ]]></ac:plain-text-body></ac:structured-macro> |
...