Fix for pull request #146

websocket-sharp/WebSocket.cs

@@ -115,6 +115,7 @@ namespace WebSocketSharp
     #region Internal Fields
 
     internal const int FragmentLength = 1016; // Max value is Int32.MaxValue - 14.
+    internal static readonly RandomNumberGenerator RandomNumber = new RNGCryptoServiceProvider ();
 
     #endregion
 
@@ -1627,8 +1628,7 @@ namespace WebSocketSharp
     internal static string CreateBase64Key ()
     {
       var src = new byte[16];
-      var rand = new Random ();
+      RandomNumber.GetBytes (src);
-      rand.NextBytes (src);
 
       return Convert.ToBase64String (src);
     }

websocket-sharp/WebSocketFrame.cs

@@ -277,8 +277,7 @@ namespace WebSocketSharp
     private static byte[] createMaskingKey ()
     {
       var key = new byte[4];
-      var rand = new Random ();
+      WebSocket.RandomNumber.GetBytes (key);
-      rand.NextBytes (key);
 
       return key;
     }