Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:82160 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 27472 invoked from network); 8 Feb 2015 19:18:40 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Feb 2015 19:18:40 -0000 Authentication-Results: pb1.pair.com smtp.mail=fsb@thefsb.org; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=fsb@thefsb.org; sender-id=pass Received-SPF: pass (pb1.pair.com: domain thefsb.org designates 67.192.241.155 as permitted sender) X-PHP-List-Original-Sender: fsb@thefsb.org X-Host-Fingerprint: 67.192.241.155 smtp155.dfw.emailsrvr.com Linux 2.6 Received: from [67.192.241.155] ([67.192.241.155:50819] helo=smtp155.dfw.emailsrvr.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 93/00-26926-E86B7D45 for ; Sun, 08 Feb 2015 14:18:39 -0500 Received: from smtp28.relay.dfw1a.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp28.relay.dfw1a.emailsrvr.com (SMTP Server) with ESMTP id 8EA5828013A; Sun, 8 Feb 2015 14:18:35 -0500 (EST) Received: by smtp28.relay.dfw1a.emailsrvr.com (Authenticated sender: fsb-AT-thefsb.org) with ESMTPSA id AC1E828012A; Sun, 8 Feb 2015 14:18:34 -0500 (EST) X-Sender-Id: fsb@thefsb.org Received: from [10.0.1.2] ([UNAVAILABLE]. [73.4.147.142]) (using TLSv1 with cipher DES-CBC3-SHA) by 0.0.0.0:465 (trex/5.4.2); Sun, 08 Feb 2015 19:18:35 GMT User-Agent: Microsoft-MacOutlook/14.4.7.141117 Date: Sun, 08 Feb 2015 14:18:32 -0500 To: Daniel Lowrey CC: "internals@lists.php.net" Message-ID: Thread-Topic: [PHP-DEV] Re: Security changes in PHP 7 References: In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit Subject: Re: [PHP-DEV] Re: Security changes in PHP 7 From: fsb@thefsb.org (Tom Worster) On 2/8/15, 12:52 PM, "Daniel Lowrey" wrote: >On Sun, Feb 8, 2015 at 12:11 PM, Tom Worster wrote: >> >> Thanks Damien and Daniel for the info. >> >> I am not concerned about running out of entropy. I am concerned about >> userspace RNGs such as OpenSSL >> http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/ > >Just to be clear (as Damien also mentioned): openssl is not a userspace >RNG. OpenSSL has an RNG that is not in the kernel memory space. Software that is in memory but not in the kernel space is in the user space.