Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72374
Return-Path: <pierre.php@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 70163 invoked from network); 7 Feb 2014 11:25:51 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 7 Feb 2014 11:25:51 -0000
Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.51 as permitted sender)
X-PHP-List-Original-Sender: pierre.php@gmail.com
X-Host-Fingerprint: 209.85.216.51 mail-qa0-f51.google.com  
Received: from [209.85.216.51] ([209.85.216.51:56759] helo=mail-qa0-f51.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 4C/85-34013-DB2C4F25 for <internals@lists.php.net>; Fri, 07 Feb 2014 06:25:49 -0500
Received: by mail-qa0-f51.google.com with SMTP id f11so5000489qae.10
        for <internals@lists.php.net>; Fri, 07 Feb 2014 03:25:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:date:message-id:subject:from:to:content-type;
        bh=BoS/l1Yl4x76lgoj1Ianq6RmNrlokBLJI6ZRIfioDyQ=;
        b=JcnzqTPu9oz4pSD4MyYmgmRXBu4FKv5nbErk2BbmNifXQKe+cSaqu5HhxA5JjvvJdt
         SWXCn8rJXTQLrvN+pbFc1M1d0zpsQBjN5FT6sBbwjjqSEVpcXv5kMYIoeigyO9Feqs/Q
         egqEUvCiac+2laOxBkh7/1lOi8Aw3nJCF6J9RLSTl2WJZwGCiEP3u2sLlPcnszOy3Oo6
         Zr8+M4jhG1ZVY5t1KOPLGoTvsWDkCUTGSyP9NCIRjqurCltixRo5B+L54WvEn1fcGqKp
         uJju29sawUD1NrjD/tMIv7mqoLPBmB90t4McCSmY7rQozK+F7nBwq2Rhb/6AXO01NGZi
         CfgA==
MIME-Version: 1.0
X-Received: by 10.224.11.196 with SMTP id u4mr21270860qau.4.1391772345743;
 Fri, 07 Feb 2014 03:25:45 -0800 (PST)
Received: by 10.140.18.145 with HTTP; Fri, 7 Feb 2014 03:25:45 -0800 (PST)
Date: Fri, 7 Feb 2014 12:25:45 +0100
Message-ID: <CAEZPtU7NJYRrsMMnNZZZ2fi_XSvqG5J=85=kd9yO5c54zfDCSw@mail.gmail.com>
To: PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: unify entropy source for all php related functions
From: pierre.php@gmail.com (Pierre Joye)

hi,

There are a lot of additions and discussions about entropy source and
(P)RNG lately.

PHP already has a ini setting to define a strong entropy source for
the session module, which defaults to urandom or arandom.

I would like to create two settings to unify the entropy source
accross php functions. That includes mcrypt, new password APIs,
session, LCG, etc.

Something along this line:

random.entropy_strong_source (/dev/(u|a)random etc.)
random.entropy_crypto_source (/dev/random etc.)

I am not willing to propose new RNG functions or extensions for 5.6 as
we have way too little time to actually discuss its design and APIs.
However having these settings unified and documented would be a good
step forward already.

Thoughts?

Cheers,
-- 
Pierre

@pierrejoye | http://www.libgd.org