Re: OpenSSL random pseudo bytes
| From: | David Coallier | Date: | Wed, 03 Sep 2008 02:33:27 +0000 |
| Subject: | Re: OpenSSL random pseudo bytes | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-40226@lists.php.net to get a copy of this message | ||
2008/9/2 Scott MacVicar <scott@macvicar.net>:
> Hi All,
>
> Attached and uploaded [1] is a patch to add the OpenSSL random pseudo byte
> function, at the moment it will return FALSE if the bytes aren't considered
> cryptographically strong, I am however considering making this parameter
> controlled.
>
> Any objections to me applying this to 5.3?
I'd say that 5.3 should be a rather "stable" version and that if we
add features we should make sure they are rock solid now. Perhaps
adding the control (Parameter to control the security/cryptography
level) now would save time and would make it a thing less to look back
in the future.
What do you think?
--
Slan,
David