Re: unify entropy source for all php related functions

From: Date: Fri, 07 Feb 2014 11:46:15 +0000
Subject: Re: unify entropy source for all php related functions
References: 1 2  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
On Fri, Feb 7, 2014 at 12:42 PM, Tjerk Meesters
<[email protected]> wrote:

> Here's a wild idea; assuming for a second that rand() is actually fed by a
> proper entropy source, are there BC implications if we did that? :)
>
> Alternatively, we would be looking at dedicated random_ functions that
> provide a similar functionality and end up with an API such as:
>
> int random_integer($min, $max)
> string random_string($length, $crypto_safe)
>
> etc...

A good PRNG APIs will provides various weak implementations as well as
strong and crypto safe backend.

However, I would really try to only focus on the unification for the
entropy sources setting. We do not have the time to actually do a good
job/discussion/design about what would be a good PNRG APIs and
features, for 5.6.

Cheers,
-- 
Pierre

@pierrejoye | http://www.libgd.org


Thread (32 messages)

« previous php.internals (#72378) next »