Issue #2763787 by pwolanin, nerdstein, rlhawk, YesCT, slasher13, tuutti, alexpott, therealssj, TravisCarden, dawehner, maximpodorov, klausi, catch, talhaparacha, Eric_A: Upgrade random_compat to latest version

Issue #2752533 by mikeker: \Drupal\Component\Utility\Crypt::randomBytesBase64 docblock refers to $byte_count instead of $count

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2550519 by klausi, nullkernel, cweagans, alexpott, pwolanin, neclimdul: Crypt::randomBytes() doesn't actually return cryptographically secure random bytes

Issue #2400197 by pwolanin, fgm, znerol, neclimdul, mpdonadio, thekevinday, Fabianx: Harden the security where hash values are compared

Issue #2079863 by filijonka, mrsinguyen, fabricebernhard, Chernous_dn, YesCT: Remove Unused local variable from /core/lib/Drupal/Component Utility/Crypt.php  Transliteration/PHPTransliteration.php  Utility/UserAgent.php  Gettext/PoHeader.php.

Issue #2140433 by pwolanin, chx, Owen Barton, dstol, Heine, Damien Tournoud: Port SA-CORE-2013-003 to Drupal 8.

Issue #2145881 by damiankloip, alexpott: Remove string casting from Crypt::hmacBase64(). Throw exceptions instead.

Issue #2141041 by Heine, klausi, David_Rothstein, amateescu, tim.plunkett, : CsrfTokenGenerator::validate() should do an identical compare. (CORE-SA-2013-003 follow-up)

Issue #2049167 by jbrown: Fixed Don't use function_exists() on functions that are built into PHP 5.3.