Re: OpenSSL random pseudo bytes

hi Scott, On Wed, Sep 3, 2008 at 3:08 AM, Scott MacVicar <scott@macvicar.net> wrote: > Hi All, > > Attached and uploaded [1] is a patch to add the OpenSSL random pseudo byte > function, at the moment it will return FALSE if the bytes aren't considered > cryptographically strong, I am however considering making this parameter > controlled. > > Any objections to me applying this to 5.3? As the idea is good and usefull, I have to object to expose this function. There is already a todo entry for our random functions (mt and normal rand) as well as a bug report. Two main issues have to be fixed there, the entropy and the actual randomness. The same underlying API is used and we can then add a function to return a random buffer directly (which is basically what is done internally too). Cheers, -- Pierre http://blog.thepimp.net | http://www.libgd.org