Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short salts. CWE-330 mapped, CI-gating exit codes. Python 3.11, stdlib only.
What is the adroamccullinp/EntropyAudit GitHub project? Description: "Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short salts. CWE-330 mapped, CI-gating exit codes. Python 3.11, stdlib only.". Written in Python. Explain what it does, its main use cases, key features, and who would benefit from using it.
Question is copied to clipboard — paste it after the AI opens.
Clone via HTTPS
Clone via SSH
Download ZIP
Download main.zipReport bugs or request features on the EntropyAudit issue tracker:
Open GitHub Issues