It’s not entirely hopeless. Running hardware RNG output through basic entropy tests prior to hashing/use could have saved everyone a lot of headache. I don’t know that people do this today but pro...
But it won't stop someone like this who doesn't use it. Perhaps a secure_rng() API which refused to fall back? But that would have to be plumbed though all the Python libs too. And maybe they would have hacked it out anyway, in the hurry to remove GPL code?
1
