Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:83852
Return-Path: <leight@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 91853 invoked from network); 25 Feb 2015 23:38:10 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 25 Feb 2015 23:38:10 -0000
Authentication-Results: pb1.pair.com header.from=leight@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=leight@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.220.181 as permitted sender)
X-PHP-List-Original-Sender: leight@gmail.com
X-Host-Fingerprint: 209.85.220.181 mail-vc0-f181.google.com  
Received: from [209.85.220.181] ([209.85.220.181:44928] helo=mail-vc0-f181.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id CC/0C-34010-1EC5EE45 for <internals@lists.php.net>; Wed, 25 Feb 2015 18:38:09 -0500
Received: by mail-vc0-f181.google.com with SMTP id im6so2686060vcb.12
        for <internals@lists.php.net>; Wed, 25 Feb 2015 15:38:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=DGMlUpAYxy6n6TISNcJpeYbswmx8vl3oHERX3lfutwU=;
        b=ajLHLz9PcSECdtpxWPRwhbUHj2KLV9sVnVeRijn9G3np48BD0VFDUXhUrHFcjTNUzQ
         9KZjIAT+sa9nBZYTGj3+0jRrduArpUuyTXyiMgC5SxijdQ6JgceV8LRyrCuAntJEKp57
         dT7yBMpD2Xkzg2TuH5kdLujqpTKYe5PAQWFHBFZGqORBll5WhLpEFO2D2Jf+B1Y8227P
         hPrxL53nnXzdrMU2R5topniqu5ix7RYGn4ihjW+FAx8zzAMHZ02FehUTEm4J4+v5/SkU
         iaRdQvmhGPhBuvo9lpzhoScO0Nhnq3Fj+6fzfbhsnahFl4RyBV36AGuUSQSWmdIFNwNG
         tlrg==
MIME-Version: 1.0
X-Received: by 10.52.103.75 with SMTP id fu11mr6263906vdb.5.1424907486581;
 Wed, 25 Feb 2015 15:38:06 -0800 (PST)
Received: by 10.52.4.104 with HTTP; Wed, 25 Feb 2015 15:38:06 -0800 (PST)
In-Reply-To: <CAAyV7nHGr=DtuLsVBBL0Xc_DyxxU765XuSOKowbCSDDqg-xKrw@mail.gmail.com>
References: <D1138D6D.5DCE0%fsb@thefsb.org>
	<CAPwsocFtOnB_9uEJUXF-JLhrx0umeW7pKM_mYKRG2eBOM6oYwQ@mail.gmail.com>
	<D113BFE2.5DD2E%fsb@thefsb.org>
	<CAAyV7nHGr=DtuLsVBBL0Xc_DyxxU765XuSOKowbCSDDqg-xKrw@mail.gmail.com>
Date: Wed, 25 Feb 2015 23:38:06 +0000
Message-ID: <CAPwsocFLCD4Pc27nF9oTgHXXit2wm8tbSmUQcF4V_jzaU8tSeA@mail.gmail.com>
To: php-internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG
From: leight@gmail.com (Leigh)

Might as well mention it because it has been discussed OTR.

We've thrown the idea around that we could cater for other sources of
random via a PHP extension. (I.e. if someone has a particular hardware
RNG they want to use). We're concerned that this may be misused, or
even abused as a way of deliberately weakening the source of random.
Our current preference is to not include this as a feature.