Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:118306
MIME-Version: 1.0
References: <CABTDVhC4J8WuKj4SdVK6hbZX2k7qrPDVCQ2g1Yb_4k4Hf5MEQQ@mail.gmail.com>
 <aa395f78-aebe-d52c-a419-aa0effeb64df@bastelstu.be> <68573dc9-90b7-37c2-eadc-20de2aa03fd8@bastelstu.be>
In-Reply-To: <68573dc9-90b7-37c2-eadc-20de2aa03fd8@bastelstu.be>
Date: Thu, 28 Jul 2022 14:13:19 +0900
Message-ID: <CAMs36HfAuhNvREvYjtx4FPWga7_Qo5HFbJNpyGn=twY0Kw3kDg@mail.gmail.com>
To: =?UTF-8?Q?Tim_D=C3=BCsterhus?= <tim@bastelstu.be>, internals@lists.php.net
Content-Type: multipart/alternative; boundary="000000000000265cba05e4d698e7"
Subject: Re: [PHP-DEV] What do you think CSPRNG in PHP
From: g-kudo@colopl.co.jp (Go Kudo)

--000000000000265cba05e4d698e7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

2022=E5=B9=B47=E6=9C=8828=E6=97=A5(=E6=9C=A8) 1:47 Tim D=C3=BCsterhus <tim@=
bastelstu.be>:

> Hi
>
> On 7/16/22 23:33, Tim D=C3=BCsterhus wrote:
> > Personally I likely wouldn't have merged the PR in question for the sam=
e
> > reasons. But at least in that case glibc is at fault :-)
>
> For those following along:
>
> It turns out the glibc "userland" implementation of arc4random() was
> questionable and was simplified to be a relatively simple wrapper around
> getrandom():
>
> https://github.com/php/php-src/pull/8984#issuecomment-1195986646
>
> and
>
> https://sourceware.org/pipermail/libc-alpha/2022-July/140939.html
>
> Best regards
> Tim D=C3=BCsterhus
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: https://www.php.net/unsub.php
>
>
Hi

Thank you. After considering various points of view, I realized that my
proposal is very dangerous. The language side should not be working on
something that will cause confusion even at the libc layer.

Also, the newly discussed vDSO implementation of getrandom (which I see no
safe way to do at the moment) seems like a better option that would benefit
all Linux distributions. Perhaps waiting for this is the better option than
anything else.

Thank you!

Regards,
Go Kudo

--000000000000265cba05e4d698e7--