Re: com php-src: Use /dev/urandom as the default mcrypt_create_iv() source: NEWS UPGRADING ext/mcrypt/mcrypt.c
| From: | Yasuo Ohgaki | Date: | Tue, 11 Mar 2014 23:05:07 +0000 |
| Subject: | Re: com php-src: Use /dev/urandom as the default mcrypt_create_iv() source: NEWS UPGRADING ext/mcrypt/mcrypt.c | ||
| References: | 1 2 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-76451@lists.php.net to get a copy of this message | ||
Hi Nikita,
On Wed, Mar 12, 2014 at 7:50 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> This is good enough.
> I'll close PR.
>
When I close my PR, I've got comment that this is not good enough.
Although IV is not a secret, MCRYPT_RAND is better to be deprecated in
favor of urandom.
Could you add E_DEPRECATED for it?
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net