Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:105024
MIME-Version: 1.0
References: <CAEsg9X0_gUdtTUiKSSZSQ7jFYoaXymqazAC2xr2MLO-U45b0Lg@mail.gmail.com>
 <CAL0xaBF94NFumGaqGL0CY-QPN_5F9BER11usrRbV3zGWd4iPsQ@mail.gmail.com> <CAEZPtU6XAtJPZ21_KvgyY2Pt2S-C7-cf9PAWAPG8m3_JOC-fow@mail.gmail.com>
In-Reply-To: <CAEZPtU6XAtJPZ21_KvgyY2Pt2S-C7-cf9PAWAPG8m3_JOC-fow@mail.gmail.com>
Date: Mon, 1 Apr 2019 10:07:47 +0200
Message-ID: <CAG9XoMQnQ+j9YPvu9eqY1JK6jJ_YzdYt7g5T5EaBch7Yz03LUQ@mail.gmail.com>
To: Pierre Joye <pierre.php@gmail.com>
Cc: Arvids Godjuks <arvids.godjuks@gmail.com>, David Rodrigues <david.proweb@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="000000000000b793190585738498"
Subject: Re: [PHP-DEV] random_seed()
From: benjamin.morel@gmail.com (Benjamin Morel)

--000000000000b793190585738498
Content-Type: text/plain; charset="UTF-8"

Seeds could even be dangerous here, as these numbers are supposed to be
cryptographically secure. If you need a seedable PRNG for testing, just use
rand().

Ben

On Mon, 1 Apr 2019 at 09:57, Pierre Joye <pierre.php@gmail.com> wrote:

> Good afternoon,
>
> fully correct.  Seeds are not needed anymore.
>
>
> best,
>
> On Mon, Apr 1, 2019, 12:44 PM Arvids Godjuks <arvids.godjuks@gmail.com>
> wrote:
>
> > On Mon, Apr 1, 2019, 05:52 David Rodrigues <david.proweb@gmail.com>
> wrote:
> >
> > > Just to know, can we have a random_seed() for
> random_int()/random_bytes()
> > > like we have mt_srand() to mt_rand()?
> > >
> > > I don't know if random_int() is more "random" than mt_rand(), but if it
> > is,
> > > so maybe is valid a random_seed() function.
> > >
> > > --
> > > David Rodrigues
> > >
> >
> > Hello,
> >
> > random_bytes/random_int use proper random generation source -
> /dev/urandom
> > in most cases (and appropriate source on windows)  - that's the whole
> point
> > why they were introduced. There is no need for seeds nor it can even be
> > initialized with a seed.
> > They are, as far as I understand, cryptographically safe random
> generators.
> >
> > I suggest reading up on the subject, the RFC and the whole thing. Their
> > introduction was well covered by various core devs in blog posts.
> >
> > >
> >
>

--000000000000b793190585738498--