Re: unify entropy source for all php related functions

From: Date: Fri, 07 Feb 2014 12:29:53 +0000
Subject: Re: unify entropy source for all php related functions
References: 1 2 3  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
On Fri, Feb 7, 2014 at 1:23 PM, Pierre Joye <[email protected]> wrote:
> On Fri, Feb 7, 2014 at 1:13 PM, Nikita Popov <[email protected]> wrote:
>
>> I'm not sure I understand this proposal and/or its purpose. Different
>> applications have different requirements on the strength of the random
>> number generator. As such this is something that needs to be specified on
>> every use, rather than a (global) ini setting.
>
> Not for this exact feature.

To clarify my point, I forgot to mention something.

This setting is not about changing any existing function behavior or
how a given argument (using one of the dozen constants) behave, nor
what a given argument will use as source. Each argument defines an
entropy source which fits in one of the two propose settings. That's
why these settings only allow one to define what will be used instead
of hardcode /dev/random, /dev/urandom or /dev/arandom. Especially for
the implementations where only one is used without any chance to work
around it (besides ugly symlink and the likes).


Thread (32 messages)

« previous php.internals (#72383) next »