Include a (static) counter as extra seeding to the SecureRandom

1 files changed, 8 insertions, 0 deletions

diff --git a/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsContext.java b/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsContext.java
index 89e95b85..0b9949f9 100644
--- a/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsContext.java
+++ b/core/src/main/java/org/bouncycastle/crypto/tls/AbstractTlsContext.java
@@ -9,6 +9,13 @@ import org.bouncycastle.util.Times;
 abstract class AbstractTlsContext
     implements TlsContext
 {
+    private static long counter = Times.nanoTime();
+
+    private synchronized static long nextCounterValue()
+    {
+        return ++counter;
+    }
+
     private RandomGenerator nonceRandom;
     private SecureRandom secureRandom;
     private SecurityParameters securityParameters;
@@ -20,6 +27,7 @@ abstract class AbstractTlsContext
 
     AbstractTlsContext(SecureRandom secureRandom, SecurityParameters securityParameters)
     {
+        secureRandom.setSeed(nextCounterValue());
         secureRandom.setSeed(Times.nanoTime());
 
         this.nonceRandom = new DigestRandomGenerator(TlsUtils.createHash(HashAlgorithm.sha256));