Re: unify entropy source for all php related functions

From: Date: Sat, 08 Feb 2014 07:13:35 +0000
Subject: Re: unify entropy source for all php related functions
References: 1 2  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
On Feb 8, 2014 5:48 AM, "Yasuo Ohgaki" <[email protected]> wrote:
>

>
> +1 for unify.
> BTW, it sound more natural if names are
> random.entropy_crypto_source (/dev/(u|a)random etc.)
> random.entropy_strong_source (/dev/random etc.)
>
> I feels like 'strong' > 'crypto' with this naming.

I did not invent this naming, it is used in many papers and docs to refer
to the quality of a PRNG.

>> I am not willing to propose new RNG functions or extensions for 5.6 as
>> we have way too little time to actually discuss its design and APIs.
>> However having these settings unified and documented would be a good
>> step forward already.
>
>
> Although, I really would like to have one, it's not much issue for me, but
> a issue for average users ;)
> This is possible implementation.
>
> https://github.com/yohgaki/php-src/compare/PHP-5.6-rfc-random_bytes
>
> It's not perfect yet, though.

There are many issues not being taken care here. Also a single function for
many different behaviors may not be what we wish.

I would suggest not to hurry up with it :)

Cheers,
Pierre


Thread (32 messages)

« previous php.internals (#72397) next »