Re: What do you think CSPRNG in PHP
| From: | Tim Düsterhus | Date: | Wed, 27 Jul 2022 16:47:37 +0000 |
| Subject: | Re: What do you think CSPRNG in PHP | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-118305@lists.php.net to get a copy of this message | ||
Hi
On 7/16/22 23:33, Tim Düsterhus wrote:
Personally I likely wouldn't have merged the PR in question for the same reasons. But at least in that case glibc is at fault :-)For those following along: It turns out the glibc "userland" implementation of arc4random() was questionable and was simplified to be a relatively simple wrapper around getrandom(): https://github.com/php/php-src/pull/8984#issuecomment-1195986646 and https://sourceware.org/pipermail/libc-alpha/2022-July/140939.html Best regards Tim Düsterhus