Re: [RFC] RNG fixes

On 14.06.2016 at 19:45, Fleshgrinder wrote: > On 6/14/2016 6:46 PM, Leigh wrote: >> The issues I want to bring up for discussion are. >> >> * Replacing mt_rand() and rand() to a strong, modern RNG. >> * Alternatively, fixing the current mt_rand() implementation to make it >> standard >> * Aliasing rand() to mt_rand() to improve output and cross-platform support >> * Fixing RAND_RANGE for large ranges. >> * Replacing insecure uses of php_rand() with php_random_bytes() >> * Making the array_rand() algorithm more efficient >> >> The RFC can be found here: >> https://wiki.php.net/rfc/rng_fixes > > Why do we need so many functions to get a random int anyways if we now > have random_int()? I would like to see all of them deprecated and > removed in PHP 8.0. In my opinion, we need at least one random function which yields reproducible values. -- Christoph M. Becker