DRBG-based SecureRandom implementations

Prior to Java 9, the JDK had two approaches to generating secure random numbers. One method, written in Java, used SHA1-based random number generation and was not terribly strong. The other method was platform-dependent and used preconfigured libraries.

Deterministic Random Bit Generator (DRBG) is a method for generating random numbers. It has been approved by the National Institute of Standards and Technology (NIST), a branch of the U.S. Department of Commerce. DRBG methodologies include modern and stronger algorithms for generating secure random numbers.

Java Enhancement Proposal 273, DRBG-Based SecureRandom Implementations aimed to implement three specific DRBG mechanisms. These mechanisms are listed as follows:

• Hash_DRBG
• HMAC_DRBG
• CTR_DRBG

Note

You can learn specifics about each of the DRBG mechanisms at http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf

Here are the three new APIs:

• SecureRandom: New methods allowing the configuration...