For Businesses | Plug-and-play secure random numbers
Businesses rarely think of random number generation techniques used in their IT projects (if at all). This is something that resides firmly in the realms of devops teams, and even within those teams this matter is typically offloaded to the lowest engineering ranks available.
Junior developers that are assigned with the task of generating random numbers would typically choose a built-in random() function provided by their software development kit. It is the simplest and quickest option possible, and something they’ve got used to do in college. In many scenarios, the built-in random() is efficient and safe.
However, there are exceptions – quite important exceptions.
The built-in generator functions leave off as soon as you need something more than just a sequence of linearly distributed random-looking numbers. These functions are a questionable friend when the numbers you are looking to generate are expected to work within a sensitive security context. Passwords, security keys, one-time codes, session IDs, and similar data elements carry a crucial role of representing a legitimate user of the system. If an adversary manages to guess a valid session ID or pre-generated password, they can impersonate that user and abuse their account or the system itself.
The majority of generic random generators were not designed with security in mind, and are an easy target for such guessing. History knows numerous examples of systems falling victims to weak random number generators.
Entropy on Tap is a specialist, secure, truly random (not pseudo-random) number generator, capable of creating unguessable sequences of numbers. We use a diversity of volatile and changeable entropy sources that feed into a shared entropy tank to produce unique and unpredictable sequences of numbers, so you can rest assured that every sensitive string you generate is 100% random and impossible to reproduce.
Entropy on Tap supports most of modern development environments and is very easy to integrate. The service is supplied via a unified, easy to use web API, with wrappers available for all modern development frameworks. On-prem setup is also possible.
Learn how Entropy on Tap can help with making your business processes more secure.