Skip to content

Generated secrets use modulo-biased alphanumeric encoding #144

@nfebe

Description

@nfebe

Alphanumeric secret values generated for template environment files map random bytes onto a 62-character set with a modulo, so the first 8 characters of the set are slightly more likely than the rest. Entropy stays high, but secrets should not have a known bias.

Fix: rejection sampling or crypto/rand.Int per character.

Raised in review of #142.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions