Predictable Seed in Pseudo-Random Number Generator (PRNG)

Phase: undefined

Use non-predictable inputs for seed generation.

Phase: Architecture and Design; Requirements

Strategy: Libraries or Frameworks

Use products or modules that conform to FIPS 140-2 to avoid obvious entropy problems, or use the more recent FIPS 140-3 if possible.

Phase: Implementation

Use a PRNG that periodically re-seeds itself using input from high-quality sources, such as hardware devices with high entropy. However, do not re-seed too frequently, or else the entropy source might block.