MAGETWO-47050: Magento 2: encryption keys generated in the admin interface are very weak

Author: Yaroslav Voronoy

app/code/Magento/EncryptionKey/Model/ResourceModel/Key/Change.php

@@ -58,7 +58,6 @@ class Change extends \Magento\Framework\Model\ResourceModel\Db\AbstractDb
      * @param \Magento\Config\Model\Config\Structure $structure
      * @param \Magento\Framework\Encryption\EncryptorInterface $encryptor
      * @param \Magento\Framework\App\DeploymentConfig\Writer $writer
-     * @param \Magento\Framework\Math\Random $random
      * @param string $connectionName
      */
     public function __construct(
@@ -137,6 +136,16 @@ public function getRandom()
         return $this->random;
     }
 
+    /**
+     * Set Random
+     *
+     * @param \Magento\Framework\Math\Random $random
+     */
+    public function setRandom(\Magento\Framework\Math\Random $random)
+    {
+        $this->random = $random;
+    }
+
     /**
      * Gather all encrypted system config values and re-encrypt them
      *

app/code/Magento/EncryptionKey/Test/Unit/Model/ResourceModel/Key/ChangeTest.php

@@ -89,9 +89,9 @@ public function setUp()
                 'resource' => $this->resourceMock,
                 'transactionManager' => $this->tansactionMock,
                 'relationProcessor' => $this->objRelationMock,
-                'random' => $this->randomMock
             ]
         );
+        $this->model->setRandom($this->randomMock);
     }
 
     private function setUpChangeEncryptionKey()