From ef73e548b9ee3542439a3150a435e9b21a85efea Mon Sep 17 00:00:00 2001 From: a1denvalu3 Date: Thu, 14 May 2026 13:01:27 +0200 Subject: [PATCH 1/2] chore: use os.urandom(30) for random_hash --- cashu/core/crypto/keys.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/cashu/core/crypto/keys.py b/cashu/core/crypto/keys.py index bee0237d7..10385bc84 100644 --- a/cashu/core/crypto/keys.py +++ b/cashu/core/crypto/keys.py @@ -1,5 +1,6 @@ import base64 import hashlib +import os import random from typing import Dict, List, Optional @@ -185,6 +186,4 @@ def derive_keyset_id_deprecated(keys: Dict[int, PublicKey]): def random_hash() -> str: """Returns a base64-urlsafe encoded random hash.""" - return base64.urlsafe_b64encode( - bytes([random.getrandbits(8) for i in range(30)]) - ).decode() + return base64.urlsafe_b64encode(os.urandom(30)).decode() From 3e5a0b9e24ef7e1d1a34da1a1a495adaecbfca46 Mon Sep 17 00:00:00 2001 From: a1denvalu3 Date: Thu, 14 May 2026 13:28:30 +0200 Subject: [PATCH 2/2] chore: remove unused random import --- cashu/core/crypto/keys.py | 1 - 1 file changed, 1 deletion(-) diff --git a/cashu/core/crypto/keys.py b/cashu/core/crypto/keys.py index 10385bc84..668bf4135 100644 --- a/cashu/core/crypto/keys.py +++ b/cashu/core/crypto/keys.py @@ -1,7 +1,6 @@ import base64 import hashlib import os -import random from typing import Dict, List, Optional from bip32 import BIP32