3 Commits

Author	SHA1	Message	Date
Lukas Brübach	83e5b3b0eb	[Security] Use a CSPRNG for salts, tokens, and RNG seeding ... Password salts and activation tokens were generated with the global SFMT RNG, which was seeded from a 32-bit timestamp, making registration salts and activation tokens predictable. The game RNG used the same timestamp seed across restarts. Add CryptoUtil backed by OpenSSL RAND_bytes and use it for salt/token generation and to seed RNG_SFMT with a 64-bit CSPRNG value in both the client and server. Link libcockatrice_utility against OpenSSL::Crypto.	2026-08-04 10:52:44 +02:00
BruebachL	1ef07309d6	Turn Card, Deck_List, Protocol, RNG, Network (Client, Server), Settings and Utility into libraries and remove cockatrice_common. (#6212) ... --------- Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de> Co-authored-by: ebbit1q <ebbit1q@gmail.com>	2025-10-09 07:36:12 +02:00
ebbit1q	1e70989f38	add password hash test (#4528) ... * clangify tests * add password hash test * properly use googletest semantics	2022-01-16 16:32:11 -05:00