Re: Default mcrypt_create_iv() to /dev/urandom
| From: | Derick Rethans | Date: | Sat, 08 Mar 2014 20:39:17 +0000 |
| Subject: | Re: Default mcrypt_create_iv() to /dev/urandom | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-73006@lists.php.net to get a copy of this message | ||
On Fri, 7 Mar 2014, Nikita Popov wrote:
> As such I would suggest defaulting the mcrypt_create_iv() $source
> parameter to MCRYPT_DEV_URANDOM. Objections?
No, flip it. This probably has changed in the last 10 years, since I
wrote that code :-)
cheers,
Derick
--
http://derickrethans.nl | http://xdebug.org
Like Xdebug? Consider a donation: http://xdebug.org/donate.php
twitter: @derickr and @xdebug
Posted with an email client that doesn't mangle email: alpine