Predictable Random Number Generator

How it was found

Description: The mobile application uses a predictable Random Number Generator (RNG). Under certain conditions this weakness may jeopardize mobile application data encryption or other protection based on randomization. For example, if encryption tokens are generated inside of the application and an attacker can provide application with a predictable token to validate and then execute a sensitive activity within the application or its backend.

Example of insecure code: Random random = new Random(); byte bytes[] = new byte[20]; random.nextBytes(bytes);

Example of secure code: SecureRandom random = new SecureRandom(); byte bytes[] = new byte[20]; random.nextBytes(bytes);

Details: There is 'new Random()' found in file 'org/jsoup/helper/DataUtil.java': line 211: StringBuilder stringBuilder = new StringBuilder(32);

line 212: Random random = new Random();

line 213: for (int i = 0; i < 32; i++) { There is 'new Random()' found in file 'com/owncloud/android/ui/notifications/NotificationUtils.java': line 31: stringBuilder.append("NotificationDelayerThread_");

line 32: stringBuilder.append(new Random(System.currentTimeMillis()).nextInt());

line 33: HandlerThread handlerThread = new HandlerThread(stringBuilder.toString(), 10); There is 'new Random()' found in file 'com/owncloud/android/jobs/MediaFoldersDetectionJob.java': line 48: public static final String TAG = "MediaFoldersDetectionJob";

line 49: private Random randomId = new Random();

line 50: There is 'new Random()' found in file 'com/owncloud/android/authentication/AuthenticatorActivity.java': line 1672: stringBuilder2.append("OAuth_user");

line 1673: stringBuilder2.append(new Random(System.currentTimeMillis()).nextLong());

line 1674: str = stringBuilder2.toString();

Reference: https://developer.android.com/reference/java/util/Random.html https://developer.android.com/reference/java/security/SecureRandom.html

Impact

When a non-cryptographic PRNG is used in a cryptographic context, it can expose the cryptography to certain types of attacks.

Often a pseudo-random number generator (PRNG) is not designed for cryptography. Sometimes a mediocre source of randomness is sufficient or preferable for algorithms that use random numbers. Weak generators generally take less processing power and/or do not use the precious, finite, entropy sources on a system. While such PRNGs might have very useful features, these same features could be used to break the cryptography.