[KYLIN-3317] Replace UUID.randomUUID with deterministic PRNG

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: v2.5.0
• Component/s: Security
• Assignee: Jiatao Tao
• Reporter: Ted Yu
• Created: 26/Mar/18 23:45
• Updated: 17/Sep/18 00:59
• Resolved: 24/Aug/18 07:06

Description

Currently UUID.randomUUID is called in various places in the code base.

• It is non-deterministic.
• It uses a single secure random for UUID generation. This uses a single JVM wide lock, and this can lead to lock contention and other performance problems.

We should move to something that is deterministic by using seeded PRNGs

new UUID(ThreadLocalRandom.current().nextLong(), ThreadLocalRandom.current().nextLong())

Issue Links

• links to: GitHub Pull Request #197