Weak randomness

Also written: predictable randomness

Keys, nonces or salts that come from a predictable source, such as the time or a fixed seed, instead of a secure one like os.urandom. If attackers can guess the value, the whole scheme falls.