[
https://issues.apache.org/jira/browse/CASSANDRA-11518?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Joshua McKenzie updated CASSANDRA-11518:
----------------------------------------
Resolution: Fixed
Fix Version/s: (was: 3.0.x)
(was: 3.x)
3.0.7
3.7
Status: Resolved (was: Ready to Commit)
[Committed|https://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=commit;h=c19066ee0251fc9d3d7d8217949b93a65088a8e9].
> o.a.c.utils.UUIDGen clock generation is not very high in entropy
> ----------------------------------------------------------------
>
> Key: CASSANDRA-11518
> URL: https://issues.apache.org/jira/browse/CASSANDRA-11518
> Project: Cassandra
> Issue Type: Improvement
> Components: Core
> Reporter: Ariel Weisberg
> Assignee: Ariel Weisberg
> Priority: Trivial
> Fix For: 3.7, 3.0.7
>
>
> makeClockSeqAndNode uses {{java.util.Random}} to generate the clock.
> {{Random}} only has 48-bits of internal state so it's not going to generate
> the best bits for clock and in addition to that it uses a collision prone
> seed that sort of defeats the purpose of clock sequence.
> A better approach to get the most out of those 14-bits would be to use
> {{SecureRandom}} with something like SHA1PRNG.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
