(This announcement was crossposted to /r/ruby, so my apologies if you’re seeing it again.)
Hi folks,
I’ve released a new gem that monkeypatches SecureRandom to use RbNaCl for random bytes instead of the default method, which is OpenSSL in MRI/YARV. If you haven’t been following the debate about MRI’s use of OpenSSL for this purpose, here is the Ruby bug discussion, and here is the corresponding thread on Hacker News. As the README explains, this gem is a temporary solution until the situation is resolved.
SecurerRandomer on RubyGems
SecurerRandomer on GitHub
Please let me know if you have any questions or feedback!
Thank you,
Mike