The W3C has been working on a Web Cryptography API for a while, now. The current version (11 December 2014) is their “Candidate Recommendation”. As such, I would not necessarily consider it fully ready for primetime but that does not mean that we can not play around with it a bit. I figured that today, we should take a check out getRandomValues().
According to MDN, “To guarantee enough performance, implementations are not using a truly random number generator, but they are using a pseudo-random number generator seeded with a value with enough entropy.” You do not want to use this method to generate encryption keys (especially since generateKey() is available within the same API). I think that this method is more foundational than anything. It is just meant to be part of the plumbing.
Like usual, you can find the code behind my example here or check out the final result here.
Have some thoughts? Drop a comment below.
