Re: unify entropy source for all php related functions

On Fri, Feb 7, 2014 at 12:42 PM, Tjerk Meesters <tjerk.meesters@gmail.com> wrote: > Here's a wild idea; assuming for a second that rand() is > actually fed by a > proper entropy source, are there BC implications if we did that? :) > > Alternatively, we would be looking at dedicated random_ > functions that > provide a similar functionality and end up with an API such as: > > int random_integer($min, $max) > string random_string($length, $crypto_safe) > > etc... A good PRNG APIs will provides various weak implementations as well as strong and crypto safe backend. However, I would really try to only focus on the unification for the entropy sources setting. We do not have the time to actually do a good job/discussion/design about what would be a good PNRG APIs and features, for 5.6. Cheers, -- Pierre @pierrejoye | http://www.libgd.org