Re: Re: Crypt salts not random.. (fwd)
| From: | Andi Gutmans | Date: | Sun, 29 Apr 2001 19:13:12 +0000 |
| Subject: | Re: Re: Crypt salts not random.. (fwd) | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-52972@lists.php.net to get a copy of this message | ||
At 10:22 AM 4/29/2001 -0400, John Donagher wrote:
On Sun, 29 Apr 2001, Zeev Suraski wrote: In order to avoid this you actually have to call it at completely different times, something you can't really guarantee. We should probably not use the timestamp as the seed (at least not alone), but also take the pid into account. Zeev That only really works for forking webservers, does it not? Another alternative would be to use microseconds...Yeah we could use microseconds but are they available on all platforms? In any case, on non-forking servers we can use thread id. Andi