diff --git a/src/main/java/org/apache/commons/lang3/RandomStringUtils.java b/src/main/java/org/apache/commons/lang3/RandomStringUtils.java index e0472c9b5..3e82c5bde 100644 --- a/src/main/java/org/apache/commons/lang3/RandomStringUtils.java +++ b/src/main/java/org/apache/commons/lang3/RandomStringUtils.java @@ -33,14 +33,13 @@ import java.util.Random; * * RandomStringGenerator instead.

* - *

Note. This class relies on an instance of {@link Random}, and instances - * of {@link Random} are not cryptographically secure. Consider instead using a more - * cryptographically secure pseudo-random number generator, for which we have no utility class.

+ *

Caveat: Instances of {@link Random} are not cryptographically secure.

* - *

We would like to further note to users that the Apache Commons Project has - * a component entirely dedicated to random number generation, namely - * Commons RNG. For a more extensive - * treatment of random numbers, we suggest that the user explore this library.

+ *

Please note that the Apache Commons project provides a component + * dedicated to pseudo-random number generation, namely + * Commons RNG, that may be + * a better choice for applications with more stringent requirements + * (performance and/or correctness).

* *

#ThreadSafe#

* @since 1.0 diff --git a/src/main/java/org/apache/commons/lang3/RandomUtils.java b/src/main/java/org/apache/commons/lang3/RandomUtils.java index 4d37b9ec6..c8d4bdcc3 100644 --- a/src/main/java/org/apache/commons/lang3/RandomUtils.java +++ b/src/main/java/org/apache/commons/lang3/RandomUtils.java @@ -21,14 +21,13 @@ import java.util.Random; /** *

Utility library that supplements the standard {@link Random} class.

* - *

Note. Instances of {@link Random} are not cryptographically - * secure. Consider instead using a more cryptographically secure pseudo-random - * number generator, for which we have no utility class.

+ *

Caveat: Instances of {@link Random} are not cryptographically secure.

* - *

We would like to further note to users that the Apache Commons Project has - * a component entirely dedicated to random number generation, namely - * Commons RNG. For a more extensive - * treatment of random numbers, we suggest that the user explore this library.

+ *

Please note that the Apache Commons project provides a component + * dedicated to pseudo-random number generation, namely + * Commons RNG, that may be + * a better choice for applications with more stringent requirements + * (performance and/or correctness).

* * @since 3.3 */