Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72026
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.44 as permitted sender)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
In-Reply-To: <CAHMUw2FQ9vHtROk9NZf8Kwd7O2V3Z1uodu29NZOfDAp0B8M+yQ@mail.gmail.com>
References: <CAGa2bXbq1ttBz+hSk20-CkKWvDdHr5+8bBmc04Q22i7K2VSs+A@mail.gmail.com>
 <52EDF552.4010208@divbyzero.net> <CAGa2bXYJRUP58x_XSHgXBy0L0Yiprw=UP-suspWtVqkvYHKC2g@mail.gmail.com>
 <CAHMUw2FQ9vHtROk9NZf8Kwd7O2V3Z1uodu29NZOfDAp0B8M+yQ@mail.gmail.com>
Date: Mon, 3 Feb 2014 10:13:45 +0900
Message-ID: <CAGa2bXaE5f=nY7mOxcB4ZMjronY6j8bA1n+DcOOR+zXnLR_cng@mail.gmail.com>
To: Tjerk Meesters <tjerk.meesters@gmail.com>
Cc: Martin Jansen <martin@divbyzero.net>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c37b32963fc904f1763e6d
Subject: Re: [PHP-DEV] Extending uniqid() or not?
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11c37b32963fc904f1763e6d
Content-Type: text/plain; charset=UTF-8

Hi Tjerk,

On Mon, Feb 3, 2014 at 8:55 AM, Tjerk Meesters <tjerk.meesters@gmail.com>wrote:

> I think it would be good enough to have only uuid v4:
>
> function uuidv4()
> {
>     $data = openssl_random_pseudo_bytes(16); // or whatever
>
>     $data[6] = chr(ord($data[6]) & 0x0f | 0x40); // set version to 0010
>     $data[8] = chr(ord($data[8]) & 0x3f | 0x80); // set bits 6-7 to 10
>
>     return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($data), 4));
> }
>
> It's really just a representation of random data, whereby 6 bits are used
> for the actual format.
>

I agree.
UUID v4 simply generate random ID and it is good for many purposes.

My concern is portability. OpenSSL(or Mcrypt) is provided as module.
Users tends not to use module functions whenever possible. To address
this issue, OpenSSL could be a module compiled by default.

Security matters for all applications. Compiling OpenSSL by default would
be nice to have.

Any comments?

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11c37b32963fc904f1763e6d--