Re: unify entropy source for all php related functions

On Fri, Feb 7, 2014 at 1:23 PM, Pierre Joye <pierre.php@gmail.com> wrote: > On Fri, Feb 7, 2014 at 1:13 PM, Nikita Popov <nikita.ppv@gmail.com> wrote: > >> I'm not sure I understand this proposal and/or its purpose. Different >> applications have different requirements on the strength of the random >> number generator. As such this is something that needs to be specified on >> every use, rather than a (global) ini setting. > > Not for this exact feature. To clarify my point, I forgot to mention something. This setting is not about changing any existing function behavior or how a given argument (using one of the dozen constants) behave, nor what a given argument will use as source. Each argument defines an entropy source which fits in one of the two propose settings. That's why these settings only allow one to define what will be used instead of hardcode /dev/random, /dev/urandom or /dev/arandom. Especially for the implementations where only one is used without any chance to work around it (besides ugly symlink and the likes).