Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72366
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.212.54 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <52F485C1.4010208@cubiclesoft.com>
References: <52F485C1.4010208@cubiclesoft.com>
Date: Fri, 7 Feb 2014 15:10:29 +0800
Message-ID: <CAHMUw2EeWCjVPb5mdMr78gSE1nurJkxszY1=E_47i5NuMTaEVA@mail.gmail.com>
To: Thomas Hruska <thruska@cubiclesoft.com>
Cc: PHP Development <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=047d7b6dbd9a56606204f1cbaf58
Subject: Re: [PHP-DEV] Make mcrypt_create_iv() an alias and move the code into /ext/standard
From: tjerk.meesters@gmail.com (Tjerk Meesters)

--047d7b6dbd9a56606204f1cbaf58
Content-Type: text/plain; charset=ISO-8859-1

Hi Thomas,

On Fri, Feb 7, 2014 at 3:05 PM, Thomas Hruska <thruska@cubiclesoft.com>wrote:

> mcrypt_create_iv() is the cleanest access to a universal system-level
> primitive that supports both /dev/urandom and php_win32_get_random_bytes()
> under the hood.  Unfortunately, it resides in /ext/mcrypt and the mcrypt
> extension isn't always enabled/available (nor should it be).  At any rate,
> it is quite odd that the function php_win32_get_random_bytes() is compiled
> into the core of PHP by default under Windows but there's currently no way
> to get at it except through an extension.  There's good code in
> mcrypt_create_iv() that is significantly useful outside of the rest of that
> extension and it isn't actually dependent upon libmcrypt for proper
> operation.
>

We already have something similar to that in password.c:

http://lxr.php.net/xref/PHP_5_6/ext/standard/password.c#111

It shouldn't be hard to turn this into an API function so that other code
written against php can use it for their own purposes.


> Moving the guts of this non-dependent function into the core would allow
> mcrypt_create_iv() to just become an alias.  The new userland function
> could be located in /ext/standard/rand.c and have an uncreative name like
> rand_bytes().
>
> --
> Thomas Hruska
> CubicleSoft President
>
> I've got great, time saving software that you will find useful.
>
> http://cubiclesoft.com/
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


-- 
--
Tjerk

--047d7b6dbd9a56606204f1cbaf58--