Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:83699 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 58260 invoked from network); 24 Feb 2015 21:17:10 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 24 Feb 2015 21:17:10 -0000 Authentication-Results: pb1.pair.com smtp.mail=padraic.brady@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=padraic.brady@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.170 as permitted sender) X-PHP-List-Original-Sender: padraic.brady@gmail.com X-Host-Fingerprint: 209.85.217.170 mail-lb0-f170.google.com Received: from [209.85.217.170] ([209.85.217.170:45993] helo=mail-lb0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id B3/26-24698-35AECE45 for ; Tue, 24 Feb 2015 16:17:08 -0500 Received: by lbjb6 with SMTP id b6so27729335lbj.12 for ; Tue, 24 Feb 2015 13:17:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=9XdMWH5zVn4P67bFg4tbEj6iy78r+Grf0qK5/YoHQtk=; b=leoY6P6pBnAXNG2n7IJ8Vrz8FjAU15XqHNyPISzFwBIcN+qaVaLvFub7CA1q/xnX7Y ApMDH7ZFm3oZwx3rl+nubq4dmIE4enuFkHfpQQGUJcwfLT3R6xI7bgFNyf6QC8lQF1uZ XV3YFL/nLPEZAZPC9uXo2dMnQnCchWYPQWak2CSzItMF6tLIUcIN6jMDtqv+0Tguf6Gn TAZavEB6JkJrTzz2vSn9R30V7ZlpfeKlpzCu4f1tUgsvL9ytObMvY6PJ+w/1M0y1HjFO /Xlguos9Uj/24DJyhP1sOyJNzP1KHDba4VBmhcw8ll9ojXViXfGIVJYt+LKAGPplB1lm Cmuw== MIME-Version: 1.0 X-Received: by 10.112.154.234 with SMTP id vr10mr13048519lbb.115.1424812623487; Tue, 24 Feb 2015 13:17:03 -0800 (PST) Received: by 10.112.154.229 with HTTP; Tue, 24 Feb 2015 13:17:03 -0800 (PST) In-Reply-To: References: Date: Tue, 24 Feb 2015 21:17:03 +0000 Message-ID: To: Anthony Ferrara Cc: Pierre Joye , Leigh , Sammy Kaye Powers , PHP internals Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG From: padraic.brady@gmail.com (=?UTF-8?Q?P=C3=A1draic_Brady?=) Hi On 24 February 2015 at 20:04, Anthony Ferrara wrote: > If random_bytes() is harder than uniqid(), it's a non-starter. Technically, it will be harder than uniqid() if producing strictly random bytes (if output needs to be printable/readable). That's not a "bad" thing obviously! Paddy -- P=C3=A1draic Brady http://blog.astrumfutura.com http://www.survivethedeepend.com