note 50046 added to ref.mcrypt

amiller of connext point net is correct. The 'one-time pad' is unbreakable, if used correctly. Correct use requires that: 1. the key length equals or exceeds the data length 2. the key must not be used more than once to encrypt data 3. the key must be truly random. The last point is a bit of a problem. "Random Number Generator" algorithms are only pseudo-random. Once the attacker finds out which PRNG was used, breaking the encryption becomes easy. Hardware solutions for the generation of random data (like, sampling noise via the sound card input and taking the LSB) have also proven to be of dubious quality. Violation of point 2 makes the encryption worthless. A known-plaintext attack will reveal the key at once. ---- Manual Page -- http://www.php.net/manual/en/ref.mcrypt.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+50046 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+50046&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+50046&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+50046&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+50046&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+50046&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+50046&report=yes Search -- http://master.php.net/manage/user-notes.php