Post #2553658
2025-11-11 15:43 UTC
@yosh@toot.yosh.is @sunfish@hachyderm.io sure, but I imagine we could specify how to handle this in a deterministic profile of the component model. maybe a PRNG with a seed computed from the component's static representation?
Replies (1)
-
@sunfish@hachyderm.io 2025-11-11 15:54
@esoterra@hachyderm.io @yosh@toot.yosh.is The catch is, for secure random numbers, you never want to use a static seed, outside of offline debugging, because that would make the data predictable, voiding the security guarantee. Ideally, deterministic environments should just never run programs that depend on secure random numbers. That puts a lot of weight on applications' ability to distinguish between secure and insecure random number APIs, and I don't know if it'll hold. But something has to give, somewhere.