Quantum Coin (Doge Protocol)
Quantum Coin (Doge Protocol)
The return from randombytes should be tested for success before usage. For example, if in Windows, the randombytes call fails, then the resulting operation might contain zero bytes or invalid...
The RandomBytes implementation for Windows uses CryptAcquireContext/CryptGenRandom which has been deprecated for years and has been claimed to have security risks. Microsoft has also specified in it's documentation that this...
https://github.com/dsprenkels/randombytes/blob/1c0c6665640535a9a851bf5c2df2e0369273b6ad/randombytes.c#L302 The code under randombytes_js_randombytes_nodejs doesn't seem to work for Electron apps webassembly. Since many implementations don't check for return value of randombytes, downstream code was silently passing and causing...