Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:82155 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 16321 invoked from network); 8 Feb 2015 17:52:59 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Feb 2015 17:52:59 -0000 Authentication-Results: pb1.pair.com smtp.mail=rdlowrey@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=rdlowrey@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.174 as permitted sender) X-PHP-List-Original-Sender: rdlowrey@gmail.com X-Host-Fingerprint: 209.85.213.174 mail-ig0-f174.google.com Received: from [209.85.213.174] ([209.85.213.174:41984] helo=mail-ig0-f174.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 1B/76-15550-A72A7D45 for ; Sun, 08 Feb 2015 12:52:58 -0500 Received: by mail-ig0-f174.google.com with SMTP id b16so12268604igk.1 for ; Sun, 08 Feb 2015 09:52:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=3+lVytNx1t9Alzi/SJa3Xs5fWzp2Esnr4AYKx2AKe+o=; b=mXmxSmg2cHUzFvfKBWNT2EMZQ12FTBniugUpuzFK0y6lgNZFsbW/uMKr2rrgRPJABL X2bWslJHJCfFxLW49ZONnO1HmlGEcdf1oEN+Z2yIjst6xj2o8lpYGCGAjezLgHEmBElh QtYHKr0JlLyT81XjZnC0BTZ+PJ6jEjbgGSwvggPDzMLixmGalULApyqD0Oao0kZ0982H yjwwpd71h4QEvmr2gQeKPh61TVCGvrnTiMibhDRnoj5Xep0c6n1o8FwvBjvvTGjdkjln 4GtkoMJpBj8NlgaQIvyufywKVx0cDJV29y747QWggHSlgMlMezo/M3ljoefyuZyBRC9u KtRQ== MIME-Version: 1.0 X-Received: by 10.107.137.17 with SMTP id l17mr1696187iod.33.1423417976130; Sun, 08 Feb 2015 09:52:56 -0800 (PST) Sender: rdlowrey@gmail.com Received: by 10.50.156.198 with HTTP; Sun, 8 Feb 2015 09:52:56 -0800 (PST) In-Reply-To: References: Date: Sun, 8 Feb 2015 12:52:56 -0500 X-Google-Sender-Auth: Xu09zYbp_5oNdoMGO60UUf-8d1Q Message-ID: To: Tom Worster Cc: Damien Tournoud , Daniel Lowrey , "internals@lists.php.net" Content-Type: multipart/alternative; boundary=001a113ed0d4d5b4ac050e9752f0 Subject: Re: [PHP-DEV] Re: Security changes in PHP 7 From: rdlowrey@php.net (Daniel Lowrey) --001a113ed0d4d5b4ac050e9752f0 Content-Type: text/plain; charset=UTF-8 On Sun, Feb 8, 2015 at 12:11 PM, Tom Worster wrote: > > Thanks Damien and Daniel for the info. > > I am not concerned about running out of entropy. I am concerned about > userspace RNGs such as OpenSSL > http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/ Just to be clear (as Damien also mentioned): openssl is not a userspace RNG. It uses the underlying system-specific resources. If your system's RNG is good enough (/dev/[u]random in nix-like systems) for you, openssl_random_pseudo_bytes() is good enough for you. --001a113ed0d4d5b4ac050e9752f0--