The default constructor of SecureRandom uses GetSeed(8), which is only 64 bits,
but worse yet, GetSeed seeds itself from the system clock Ticks.
There are 10million ticks per second, and a single laptop CPU core can perform
between 10million and 200million AES operations per second, depending on
> From: Edward Ned Harvey (bouncycastle)
> [mailto:bouncycas...@nedharvey.com]
>
> The default constructor of SecureRandom uses GetSeed(8), which is only 64
> bits, but worse yet, GetSeed seeds itself from the system clock Ticks.
I am sorry - I just stepped through code for the nineteenth time, a
