Branch: refs/heads/blead
  Home:   https://github.com/Perl/perl5
  Commit: fdbbfbf41538c26b8b3c6edf37c5d861394c8af6
      
https://github.com/Perl/perl5/commit/fdbbfbf41538c26b8b3c6edf37c5d861394c8af6
  Author: Robert Rothenberg <r...@cpan.org>
  Date:   2025-06-13 (Fri, 13 Jun 2025)

  Changed paths:
    M pod/perlfunc.pod

  Log Message:
  -----------
  Simplify the recommended alternatives to rand()

The CPAN Security Group (CPANSec) is currently working on guides to
generating security-quality random data [1]. We are focusing on modules
that have secure defaults and are fairly lightweight.

We would like to change the recommended modules to ones that we think
are better options.

Crypt::URandom is portable, has fewer prerequisites than Crypt::Random,
Math::Random::Secure or Data::Entropy, and works with Windows.

Crypt::PRNG has secure defaults and methods for generating different
kinds of random data.

Math::TrulyRandom hasn't been updated since 1996, and is a solution
intended for systems without something like /dev/random.

Data::Entropy had a security issue that was recently fixed, and the
latest version is marked as deprecated.

[1] https://security.metacpan.org/docs/guides/random-data-for-security.html


  Commit: 8c71d4a0b542607dbfe67a67fc2fee44f2452d5d
      
https://github.com/Perl/perl5/commit/8c71d4a0b542607dbfe67a67fc2fee44f2452d5d
  Author: Robert Rothenberg <r...@cpan.org>
  Date:   2025-06-13 (Fri, 13 Jun 2025)

  Changed paths:
    M t/porting/known_pod_issues.dat

  Log Message:
  -----------
  Update known_pod_issues.dat for tests


Compare: https://github.com/Perl/perl5/compare/d6f09a896842...8c71d4a0b542

To unsubscribe from these emails, change your notification settings at 
https://github.com/Perl/perl5/settings/notifications

Reply via email to