Re: unify entropy source for all php related functions
| From: | Pierre Joye | Date: | Fri, 14 Feb 2014 12:26:13 +0000 |
| Subject: | Re: unify entropy source for all php related functions | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-72593@lists.php.net to get a copy of this message | ||
On Feb 14, 2014 7:03 PM, "Andrey Andreev" <narf@devilix.net> wrote:
> ALL sources
> say that /dev/urandom is both widely used and considered safe for
> cryptography. Only a select few mention that it could be a bit weaker
> in specific cases, in theory.
No urandom (and similar) are not crypto safe. Totally not. They are however
good enough for most usages but crypto safe related tasks like key
generation and the likes. Any (good) paper mentions this.
Cheers,
Pierre