Bug 24877 – Randomness in UUID generation is insufficient.

UUIDs generated by randomUUID() use the random numbers from std.random, granted with an unpredictableSeed, but from a fundamentally insecure and low entropy source. As per the latest UUID RFC, RFC-8562, Section 8 this should at least have the option of using an actual quality entropy source. https://www.rfc-editor.org/rfc/rfc9562.html in section 8 says: "Instead CSPRNG data SHOULD be selected from a source with sufficient entropy to ensure guaranteed uniqueness among UUID generation."

There's an overload that accepts an RNG --- UUID randomUUID(RNG)(ref RNG randomGen); ---

and no cryptographic streng RNG to use with it. https://breakpoint.purrfect.fr/article/cracking_phobos_uuid.html

THIS ISSUE HAS BEEN MOVED TO GITHUB https://github.com/dlang/phobos/issues/9881 DO NOT COMMENT HERE ANYMORE, NOBODY WILL SEE IT, THIS ISSUE HAS BEEN MOVED TO GITHUB