note 118658 modified in function.openssl-random-pseudo-bytes by cmb
| From: | cmb@php.net | Date: | Fri, 15 Jan 2016 16:58:06 +0000 |
| Subject: | note 118658 modified in function.openssl-random-pseudo-bytes by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-204693@lists.php.net to get a copy of this message | ||
[Editor's note: the bug has been fixed as of PHP 5.4.44, 5.5.28 and PHP 5.6.12]
Until PHP 5.6 openssl_random_pseudo_bytes() did NOT use a "cryptographically strong
algorithm"!
See bug report https://bugs.php.net/bug.php?id=70014 and the
corresponding source code at https://github.com/php/php-src/blob/php-5.6.10/ext/openssl/openssl.c#L5408
--was--
Until PHP 5.6 openssl_random_pseudo_bytes() did NOT use a "cryptographically strong
algorithm"!
See bug report https://bugs.php.net/bug.php?id=70014 and the
corresponding source code at https://github.com/php/php-src/blob/php-5.6.10/ext/openssl/openssl.c#L5408
http://php.net/manual/en/function.openssl-random-pseudo-bytes.php