replace SecureRandom with a safer alternative Sysrandom

xorond · Oct 1, 2016 · 36b9972 · 36b9972
1 parent d81ac3b
commit 36b9972
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -1,6 +1,7 @@
 source 'https://rubygems.org'
 gem 'highline', :require => 'highline/import'
 gem 'zxcvbn-ruby', :require => 'zxcvbn'
+gem 'sysrandom', :require => 'sysrandom'
 group :optional do
   gem 'clipboard'
   gem 'ffi', :platforms => [:mswin, :mingw]

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -3,6 +3,7 @@ GEM
   specs:
     clipboard (1.1.1)
     highline (1.7.8)
+    sysrandom (1.0.3)
     zxcvbn-ruby (0.1.1)
 
 PLATFORMS
@@ -12,7 +13,8 @@ DEPENDENCIES
   clipboard
   ffi
   highline
+  sysrandom
   zxcvbn-ruby
 
 BUNDLED WITH
-   1.13.1
+   1.13.2
diff --git a/passtrust b/passtrust
@@ -83,7 +83,7 @@ def print_password(word)
   end
 
   if $options.clipboard
-    3.times { Clipboard.copy truncate(magic(SecureRandom.base64)) }
+    3.times { Clipboard.copy truncate(magic(Sysrandom.hex(16))) }
   end
   cls
 end
@@ -116,7 +116,7 @@ def main
   # disable clipboard option if clipboard gem is not loaded
   $options.clipboard = false if not defined?(Clipboard)
 
-  (puts "Your random passphrase is: " ; print_password(magic(p SecureRandom.base64)); exit 130) if $options.random
+  (puts "Your random passphrase is: " ; print_password(magic(p Sysrandom.hex(16))); exit 130) if $options.random
 
   puts green("Secret mode is activated") if $options.secret