mirror of
https://github.com/esphome/esphome.git
synced 2026-02-19 16:05:35 -07:00
9616596146
Replace random.random() with secrets.token_hex() for generating the client nonce in OTA challenge-response authentication. The random module uses Mersenne Twister which is not cryptographically secure. The secrets module is the correct choice for security-sensitive token generation.
