Introduced protections against predictable RNG abuse

Pixee-Bot-Java · Aug 10, 2024 · 5a38f95 · 5a38f95
1 parent 38a3f87
commit 5a38f95
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/src/androidTest/java/com/owncloud/android/util/EncryptionTestIT.java b/app/src/androidTest/java/com/owncloud/android/util/EncryptionTestIT.java
@@ -199,7 +199,7 @@ public void encryptStringSymmetricRandom() throws Exception {
             byte[] key = generateKey();
 
             String encryptedString;
-            if (new Random().nextBoolean()) {
+            if (new SecureRandom().nextBoolean()) {
                 encryptedString = EncryptionUtils.encryptStringSymmetricAsString(privateKey, key);
             } else {
                 encryptedString = EncryptionUtils.encryptStringSymmetricAsStringOld(privateKey, key);
@@ -262,7 +262,7 @@ public void encryptPrivateKey() throws Exception {
             String privateKeyString = encodeBytesToBase64String(privateKeyBytes);
 
             String encryptedString;
-            if (new Random().nextBoolean()) {
+            if (new SecureRandom().nextBoolean()) {
                 encryptedString = EncryptionUtils.encryptPrivateKey(privateKeyString, keyPhrase);
             } else {
                 encryptedString = EncryptionUtils.encryptPrivateKeyOld(privateKeyString, keyPhrase);