Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG
| From: | Leigh | Date: | Wed, 25 Feb 2015 23:38:06 +0000 |
| Subject: | Re: [RFC] [DISCUSSION] Reliable user-land CSPRNG | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-83852@lists.php.net to get a copy of this message | ||
Might as well mention it because it has been discussed OTR.
We've thrown the idea around that we could cater for other sources of
random via a PHP extension. (I.e. if someone has a particular hardware
RNG they want to use). We're concerned that this may be misused, or
even abused as a way of deliberately weakening the source of random.
Our current preference is to not include this as a feature.