blocks|key|886921|text|例如，您可以使用鼠标移动作为随机数的种子，每当onmousemove事件发生时读取时间和鼠标位置，将该数据提供给美白函数，您将获得手头的一些第一类随机数。不过，在使用数据之前，请确保用户已经充分移动了鼠标。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|886922|编辑:我自己也做了一个密码生成器，我不能保证我的美白功能是完美的，但不断地重新播种，我非常确定它足以胜任这项工作:Edit.Hopto.org/generator.htm|886923|Edit2:它现在可以在智能手机上使用，但只能在熵收集时禁用触摸功能。Android在其他任何方式下都不能正常工作。|886924|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

<p>You can for instance use mouse movement as seed for random numbers, read out time and mouse position whenever the onmousemove event happens, feed that data to a whitening function and you will have some first class random at hand. Though do make sure that user has moved the mouse sufficiently before you use the data.</p>

<p>Edit: I have myself played a bit with the concept by making a password generator, I wouldn't guarantee that my whitening function is flawless, but being constantly reseeded I'm pretty sure that it's plenty for the job: ebusiness.hopto.org/generator.htm</p>

<p>Edit2: It now sort of works with smartphones, but only by disabling touch functionality while the entropy is gathered. Android won't work properly any other way.</p>


blocks|key|886950|text|你可能想试试http://sourceforge.net/projects/clipperzlib/，它有一个Fortuna的实现，这是一个加密安全的随机数生成器。(查看src/js/Clipperz/Crypto/PRNG.js)。它似乎也使用鼠标作为随机性的来源。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|886951|entityMap|0|LINK|mutability|MUTABLE|url|http://sourceforge.net/projects/clipperzlib/|1|http://en.wikipedia.org/wiki/Fortuna_%2528PRNG%2529^0|6|18|0|1J|7|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

<p>You might want to try
<a href="http://sourceforge.net/projects/clipperzlib/" rel="nofollow">http://sourceforge.net/projects/clipperzlib/</a>
It has an implementation of <a href="http://en.wikipedia.org/wiki/Fortuna_%28PRNG%29" rel="nofollow">Fortuna</a> which is a cryptographically secure random number generator. (Take a look at src/js/Clipperz/Crypto/PRNG.js). It appears to use the mouse as a source of randomness as well.</p>


blocks|key|1101804|text|在WHATWG上有关于将其添加到window.crypto对象的讨论。您可以阅读the+discussion并查看proposed+API和webkit+bug+(22049)。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1101805|刚刚测试了以下代码in+Chrome，以获得一个随机字节：|1101806|​|1101807|(function(){
++var+buf+=+new+Uint8Array(1);
++window.crypto.getRandomValues(buf);
++alert(buf[0]);
})();|code-block|syntax|javascript|1101808|1101809|entityMap|0|LINK|mutability|MUTABLE|url|http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-February/030241.html|1|http://wiki.whatwg.org/wiki/Crypto|2|http://blog.chromium.org/2011/06/new-chromium-security-features-june.html^0|14|E|0|1L|C|1|0|9|9|2|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@$A|10|B|11|1|12]|$A|13|B|14|1|15]]|C|$]]|$1|D|3|E|5|6|7|16|8|@]|9|@$A|17|B|18|1|19]]|C|$]]|$1|F|3|G|5|6|7|1A|8|@]|9|@]|C|$]]|$1|H|3|I|5|J|7|1B|8|@]|9|@]|C|$K|L]]|$1|M|3|G|5|6|7|1C|8|@]|9|@]|C|$]]|$1|N|3|-4|5|6|7|1D|8|@]|9|@]|C|$]]]|O|$P|$5|Q|R|S|C|$T|U]]|V|$5|Q|R|S|C|$T|W]]|X|$5|Q|R|S|C|$T|Y]]]]

<p>There's been discussion at WHATWG on adding this to the window.crypto object. You can read <a href="http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-February/030241.html" rel="noreferrer">the discussion</a> and check out the <a href="http://wiki.whatwg.org/wiki/Crypto" rel="noreferrer">proposed API</a> and webkit bug (22049).</p>

<p>Just tested the following code <a href="http://blog.chromium.org/2011/06/new-chromium-security-features-june.html" rel="noreferrer">in Chrome</a> to get a random byte:</p>

<p><div class="snippet" data-lang="js" data-hide="false" data-console="false" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>(function(){
  var buf = new Uint8Array(1);
  window.crypto.getRandomValues(buf);
  alert(buf[0]);
})();</code></pre>
</div>
</div>
</p>


blocks|key|887043|text|首先，你需要一个熵源。例如，鼠标的移动、密码或任何其他。但所有这些来源都不是随机的，它们保证你有20比特的熵，很少会更多。你需要采取的下一步是使用像“基于密码的KDF”这样的机制，这将在计算上难以区分随机数据和数据。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|887044|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

<p>First of all, you need a source of entropy. For example, movement of the mouse, password, or any other. But all of these sources are very far from random, and guarantee you 20 bits of entropy, rarely more. The next step that you need to take is to use the mechanism like "Password-Based KDF" it will make computationally difficult to distinguish data from random.</p>


blocks|key|1101929|text|使用window.crypto.getRandomValues，如下所示：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1101930|var+random_num+=+new+Uint8Array(2048+/+8);+//+2048+=+number+length+in+bits
window.crypto.getRandomValues(random_num);|code-block|syntax|javascript|1101931|这是supported+in+all+modern+browsers，并使用操作系统的随机生成器(例如/dev/urandom)。如果您需要IE11兼容性，则必须通过var+crypto+=+window.crypto+%7C%7C+window.msCrypto;+crypto.getRandomValues(..)使用它们的前缀实现。|1101932|请注意，window.crypto应用编程接口也可以generate+keys+outright，这可能是更好的选择。|1101933|entityMap|0|LINK|mutability|MUTABLE|url|http://www.w3.org/TR/WebCryptoAPI/#Crypto-method-getRandomValues|1|http://caniuse.com/#feat=getrandomvalues|2|https://en.wikipedia.org/wiki//dev/random|3|https://www.w3.org/TR/WebCryptoAPI/#dfn-SubtleCrypto-method-generateKey^0|2|T|2|T|0|0|0|1F|C|2B|21|2|W|1|1F|C|2|0|4|D|Q|M|3|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@$9|15|A|16|1|17]]|E|$]]|$1|F|3|G|5|H|7|18|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]]|D|@$9|1E|A|1F|1|1G]|$9|1H|A|1I|1|1J]]|E|$]]|$1|M|3|N|5|6|7|1K|8|@$9|1L|A|1M|B|C]]|D|@$9|1N|A|1O|1|1P]]|E|$]]|$1|O|3|-4|5|6|7|1Q|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]|W|$5|R|S|T|E|$U|X]]|Y|$5|R|S|T|E|$U|Z]]|10|$5|R|S|T|E|$U|11]]]]

<p>Use <a href="http://www.w3.org/TR/WebCryptoAPI/#Crypto-method-getRandomValues" rel="noreferrer"><code>window.crypto.getRandomValues</code></a>, like this:</p>

<pre><code>var random_num = new Uint8Array(2048 / 8); // 2048 = number length in bits
window.crypto.getRandomValues(random_num);
</code></pre>

<p>This is <a href="http://caniuse.com/#feat=getrandomvalues" rel="noreferrer">supported in all modern browsers</a> and uses the operating system's random generator (e.g. <a href="https://en.wikipedia.org/wiki//dev/random" rel="noreferrer"><code>/dev/urandom</code></a>). If you need IE11 compatibility, you have to use their prefixed implementation via<code>var crypto = window.crypto || window.msCrypto; crypto.getRandomValues(..)</code> though.</p>

<p>Note that the <code>window.crypto</code> API can also <a href="https://www.w3.org/TR/WebCryptoAPI/#dfn-SubtleCrypto-method-generateKey" rel="noreferrer">generate keys outright</a>, which may be the better option.</p>


blocks|key|887170|text|要从范围[0,+1)+(类似于Math.random())中获取加密强数字，请使用crypto|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|887171|​|887172|let+random+=+()=>+crypto.getRandomValues(new+Uint32Array(1))[0]/2**32;

console.log(+random()+);|code-block|syntax|javascript|887173|887174|entityMap|0|LINK|mutability|MUTABLE|url|https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues^0|4|6|F|D|15|6|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]|$9|Y|A|Z|B|C]]|D|@$9|10|A|11|1|12]]|E|$]]|$1|F|3|G|5|6|7|13|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|14|8|@]|D|@]|E|$K|L]]|$1|M|3|G|5|6|7|15|8|@]|D|@]|E|$]]|$1|N|3|-4|5|6|7|16|8|@]|D|@]|E|$]]]|O|$P|$5|Q|R|S|E|$T|U]]]]

<p>to get cryptographic strong number from range <code>[0, 1)</code> (similar to <code>Math.random()</code>) use <a href="https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues" rel="noreferrer">crypto</a>:</p>

<p><div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>let random = ()=&gt; crypto.getRandomValues(new Uint32Array(1))[0]/2**32;

console.log( random() );</code></pre>
</div>
</div>
</p>


问在javascript中保护随机数？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在javascript中保护随机数？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在javascript中保护随机数？
EN