Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:118267
MIME-Version: 1.0
References: <CABTDVhC4J8WuKj4SdVK6hbZX2k7qrPDVCQ2g1Yb_4k4Hf5MEQQ@mail.gmail.com>
In-Reply-To: <CABTDVhC4J8WuKj4SdVK6hbZX2k7qrPDVCQ2g1Yb_4k4Hf5MEQQ@mail.gmail.com>
Date: Sat, 16 Jul 2022 01:12:21 +0900
Message-ID: <CABTDVhDvSqjhxCrqfYaR+zHHwRKYZ=vx_wfZL2ALWvigpO74Gg@mail.gmail.com>
To: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000023cbaa05e3da49b2"
Subject: Re: What do you think CSPRNG in PHP
From: zeriyoshi@gmail.com (Go Kudo)

--00000000000023cbaa05e3da49b2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

2022=E5=B9=B47=E6=9C=8816=E6=97=A5(=E5=9C=9F) 0:54 Go Kudo <zeriyoshi@gmail=
.com>:

> Hi Internals.
>
> Random Extension is accepted and being implemented in PHP 8.2. Many thank=
s
> for the review.
>
> The changes to enable arc4random in glibc were recently merged.
>
> https://github.com/php/php-src/pull/8984
>
> This has the effect of reducing the number of  getrandom system calls
> issued on Linux, which is effective in improving performance.
>
> However, this will only work in environments that use GNU libc, and will
> not work on Linuxes that use other libc (e.g. Alpine Linux that uses musl=
).
>
> As we discussed a bit above in PR (which is inherently a bad thing,
> because it's not a good thing), the following is an example of a "good" P=
R
> campaign Apologies), if we could implement CSPRNG on PHP, for example, it
> would improve performance on all platforms.
>
> However, there are several challenges to this.
>
> - Increased maintenance costs
> - Requires optimization for CPU architecture
> - Requires familiarity with CSPRNG
>
> PHP already bundles xxHash and appears ready to make this happen.
>
> Also, an appropriate CSPRNG implementation may be able to resolve the
> current complex macro branching.
>
> What do you think about this?
>
> Regards
> Go Kudo
>

xxHash has nothing to do with it. Forget it.

--00000000000023cbaa05e3da49b2--