note 98927 added to function.openssl-public-encrypt

If you need a message key, obtain it from the openssl_random_pseudo_bytes() function. DO NOT just hash the current time-- an attacker will guess any such key very easily (he'll just hash a bunch of likely time values and try them until he finds the right one. The attacker can generate and test many millions of candidate hashes every minute using an ordinary PC). ---- Server IP: 69.147.83.197 Probable Submitter: 24.17.194.162 ---- Manual Page -- http://www.php.net/manual/en/function.openssl-public-encrypt.php Edit -- https://master.php.net/note/edit/98927 Del: integrated -- https://master.php.net/note/delete/98927/integrated Del: useless -- https://master.php.net/note/delete/98927/useless Del: bad code -- https://master.php.net/note/delete/98927/bad+code Del: spam -- https://master.php.net/note/delete/98927/spam Del: non-english -- https://master.php.net/note/delete/98927/non-english Del: in docs -- https://master.php.net/note/delete/98927/in+docs Del: other reasons-- https://master.php.net/note/delete/98927 Reject -- https://master.php.net/note/reject/98927 Search -- https://master.php.net/manage/user-notes.php