Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72384
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.219.42 as permitted sender)
MIME-Version: 1.0
Date: Fri, 7 Feb 2014 07:31:36 -0500
Message-ID: <CAH8MpnkR5AF7rE3X-_9JC6CAqJx9Yy4y5OHwVvnSuEZKE=-buQ@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11330964c1c3d504f1d02bcb
Subject: Re: unify entropy source for all php related functions
From: rdlowrey@gmail.com (Daniel Lowrey)

--001a11330964c1c3d504f1d02bcb
Content-Type: text/plain; charset=ISO-8859-1

> I would like to create two settings to unify the entropy source
> accross php functions. That includes mcrypt, new password APIs,
> session, LCG, etc.

I'm generally against .ini directives but this sounds like a sensible
approach to me. In the absence of a unified function to handle this the
.ini settings prevent me from having to iterate over the potential names
until I find one that's available.

> I am not willing to propose new RNG functions or extensions for 5.6 as
> we have way too little time to actually discuss its design and APIs.
> However having these settings unified and documented would be a good
> step forward already.

I agree. It's too late in the game to rush something like this for 5.6. No
PHP applications have exploded (that I'm aware of) for lack of a unified
entropy function; we should probably discuss the best solution going
forward and get it right for 5.7 ...

--001a11330964c1c3d504f1d02bcb--