SecureRandom

Class Overview

This class generates cryptographically secure pseudo-random numbers.

Supported Algorithms

• SHA1PRNG: Based on SHA-1. Not guaranteed to be compatible with the SHA1PRNG algorithm on the reference implementation.

The default algorithm is defined by the first SecureRandomSpi provider found in the VM's installed security providers. Use Security to install custom SecureRandomSpi providers.

Seeding SecureRandom may be insecure

A seed is an array of bytes used to bootstrap random number generation. To produce cryptographically secure random numbers, both the seed and the algorithm must be secure.

By default, instances of this class will generate an initial seed using an internal entropy source, such as /dev/urandom. This seed is unpredictable and appropriate for secure use.

You may alternatively specify the initial seed explicitly with the seeded constructor or by calling setSeed(byte[]) before any random numbers have been generated. Specifying a fixed seed will cause the instance to return a predictable sequence of numbers. This may be useful for testing but it is not appropriate for secure use.

Although it is common practice to seed Random with the current time, that is dangerous with SecureRandom since that value is predictable to an attacker and not appropriate for secure use.

Calling setSeed(byte[]) on a SecureRandom after it has been used to generate random numbers (ie. calling {#link nextBytes}) will supplement the existing seed. This does not cause the instance to return a predictable numbers, nor does it harm the security of the numbers generated.

Summary

Public Constructors
	SecureRandom() Constructs a new SecureRandom that uses the default algorithm.
	SecureRandom(byte[] seed) Constructs a new seeded SecureRandom that uses the default algorithm.

Protected Constructors
	SecureRandom(SecureRandomSpi secureRandomSpi, Provider provider) Constructs a new instance of SecureRandom using the given implementation from the specified provider.

Public Methods
byte[]	generateSeed(int numBytes) Generates and returns the specified number of seed bytes, computed using the seed generation algorithm used by this SecureRandom.
String	getAlgorithm() Returns the name of the algorithm of this SecureRandom.
static SecureRandom	getInstance(String algorithm, String provider) Returns a new instance of SecureRandom that utilizes the specified algorithm from the specified provider.
static SecureRandom	getInstance(String algorithm, Provider provider) Returns a new instance of SecureRandom that utilizes the specified algorithm from the specified provider.
static SecureRandom	getInstance(String algorithm) Returns a new instance of SecureRandom that utilizes the specified algorithm.
final Provider	getProvider() Returns the provider associated with this SecureRandom.
static byte[]	getSeed(int numBytes) Generates and returns the specified number of seed bytes, computed using the seed generation algorithm used by this SecureRandom.
synchronized void	nextBytes(byte[] bytes) Generates and stores random bytes in the given byte[] for each array element.
synchronized void	setSeed(byte[] seed) Seeds this SecureRandom instance with the specified seed.
void	setSeed(long seed) Seeds this SecureRandom instance with the specified eight-byte seed.

Protected Methods
final int	next(int numBits) Generates and returns an int containing the specified number of random bits (right justified, with leading zeros).

[Expand] Inherited Methods
From class java.util.Random synchronized int next(int bits) Returns a pseudo-random uniformly distributed int value of the number of bits specified by the argument bits as described by Donald E. boolean nextBoolean() Returns the next pseudo-random, uniformly distributed boolean value generated by this generator. void nextBytes(byte[] buf) Modifies the byte array by a random sequence of bytes generated by this random number generator. double nextDouble() Generates a normally distributed random double number between 0.0 inclusively and 1.0 exclusively. float nextFloat() Generates a normally distributed random float number between 0.0 inclusively and 1.0 exclusively. synchronized double nextGaussian() Pseudo-randomly generates (approximately) a normally distributed double value with mean 0.0 and a standard deviation value of 1.0 using the polar method of G. int nextInt(int n) Returns a new pseudo-random int value which is uniformly distributed between 0 (inclusively) and the value of n (exclusively). int nextInt() Generates a uniformly distributed 32-bit int value from the random number sequence. long nextLong() Generates a uniformly distributed 64-bit integer value from the random number sequence. synchronized void setSeed(long seed) Modifies the seed a using linear congruential formula presented in The Art of Computer Programming, Volume 2, Section 3.2.1.
From class java.lang.Object Object clone() Creates and returns a copy of this Object. boolean equals(Object o) Compares this instance with the specified object and indicates if they are equal. void finalize() Called before the object's memory is reclaimed by the VM. final Class<? extends Object> getClass() Returns the unique instance of Class that represents this object's class. int hashCode() Returns an integer hash code for this object. final void notify() Causes a thread which is waiting on this object's monitor (by means of calling one of the wait() methods) to be woken up. final void notifyAll() Causes all threads which are waiting on this object's monitor (by means of calling one of the wait() methods) to be woken up. String toString() Returns a string containing a concise, human-readable description of this object. final void wait() Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object. final void wait(long millis, int nanos) Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object or until the specified timeout expires. final void wait(long millis) Causes the calling thread to wait until another thread calls the notify() or notifyAll() method of this object or until the specified timeout expires.