Why secure systems require random numbers
Sep 13, 2013John Graham-Cumming

Summary
This post significantly deepens the understanding of the foundational security mechanisms underpinning Cloudflare's offerings by explaining the critical importance of random number generation in secure systems. It details how vulnerabilities in pseudo-random number generators (PRNGs) can be exploited, using the Hacker News session ID vulnerability as a prime example. The post also outlines the role of random numbers in various cryptographic protocols like SSL/TLS and WPA2, and introduces Cloudflare's initiative to improve its own random number generation by incorporating truly random data sources to enhance customer security.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack