opensource/galaxy
3
0
Fork 0
mirror of https://github.com/galaxyproject/galaxy.git synced 2026-09-24 16:30:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

Change to SecurityHelper, no need to cache RandomPool, just create a new RandomPool with exactly 128 bits of entropy each time.

Browse Source
This commit is contained in:
Greg Von Kuster
2008-06-19 15:22:07 +00:00
parent 3443e25e06
commit a1d98205e1
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/galaxy/web/security/__init__.py
+5 -5
View File
@@ -10,7 +10,6 @@ class SecurityHelper( object ):
def __init__( self, **config ):
self.id_secret = config['id_secret']
self.id_cipher = Blowfish.new( self.id_secret )
self.__random_pool = RandomPool( 1024 )
def encode_id( self, id ):
# Convert to string
s = str( id )
@@ -31,10 +30,11 @@ class SecurityHelper( object ):
return self.id_cipher.decrypt( session_key.decode( 'hex' ) ).lstrip( "!" )
def get_new_session_key( self ):
# Generate a unique, high entropy 128 bit random number
while self.__random_pool.entropy < 100:
self.__random_pool.add_event()
self.__random_pool.stir()
rn = number.getRandomNumber( 128, self.__random_pool.get_bytes )
random_pool = RandomPool( 16 )
while random_pool.entropy < 128:
random_pool.add_event()
random_pool.stir()
rn = number.getRandomNumber( 128, random_pool.get_bytes )
# session_key must be a string
return str( rn )