Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG
| From: | Yasuo Ohgaki | Date: | Wed, 25 Feb 2015 01:41:06 +0000 |
| Subject: | Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-83733@lists.php.net to get a copy of this message | ||
Hi Padraic,
On Wed, Feb 25, 2015 at 7:54 AM, Pádraic Brady <padraic.brady@gmail.com>
wrote:
> On 24 February 2015 at 22:08, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> > Random bytes is better. People would use it for IV or like with the
> > size of IV. If we use string, users loose effective bits.
>
> Suggestion was for an additional function, so random_bytes() would
> still be there ;).
random_string() sounds good to me, too!
It can be used system generated passwords, etc.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net