V8 uses a linear PRNG, depending on the precision of system time fed, V8 is vulnerable to the same attacks PHP was regarding a weak seed: it could be derived through a brute force search or by reversing the outputs.<div><br></div><div>Given that now that time stamps in browsers use reduced precision, it could be argued that using math.random, V8 is still vulnerable to spectre&nbsp;</div><div><br></div><div><br></div><div>Never mind that this bug report was closed as working as intended long ago:&nbsp;<span style="font-size: 12pt; font-family: Helvetica;">https://bugs.chromium.org/p/v8/issues/detail?id=2905</span><div><br></div>Personally I think a reduced round cryptographic function in OFB or something similar would be best.&nbsp;<caret></caret><br><div><br></div><div id="protonmail_mobile_signature_block"><div>Sent from ProtonMail Mobile</div></div></div>