Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG
| From: | Tom Worster | Date: | Wed, 25 Feb 2015 21:33:19 +0000 |
| Subject: | Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-83827@lists.php.net to get a copy of this message | ||
On 2/25/15, 3:24 PM, "Stanislav Malyshev" <smalyshev@gmail.com> wrote:
>Good summary read on the topic:
>http://www.2uo.de/myths-about-urandom/
>TLDR: it's ok to use /dev/urandom.
Yes! Thanks for the link. Much shorter but with pretty much the same
message, I like:
http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/
The Linux RNG design and especially the urandom(4) man page has caused a
lot of trouble. I wonder how many more years before we can put it
behind us.
Tom