Re: Improving mt_rand() seed
| From: | Yasuo Ohgaki | Date: | Wed, 18 Jan 2017 00:27:39 +0000 |
| Subject: | Re: Improving mt_rand() seed | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-97845@lists.php.net to get a copy of this message | ||
Hi Leigh,
On Tue, Jan 17, 2017 at 11:48 PM, Leigh <leight@gmail.com> wrote:
> mt_rand is not advertised as crypto-quality.
>
> Where do you think mt_rand is used in session id generation?
>
I don't mention session module uses mt_rand, but older versions used
php_combined_lcg() .
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net