Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:83874 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 55497 invoked from network); 26 Feb 2015 08:48:36 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 26 Feb 2015 08:48:36 -0000 Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.181 as permitted sender) X-PHP-List-Original-Sender: smalyshev@gmail.com X-Host-Fingerprint: 209.85.192.181 mail-pd0-f181.google.com Received: from [209.85.192.181] ([209.85.192.181:43978] helo=mail-pd0-f181.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id A9/21-47686-3EDDEE45 for ; Thu, 26 Feb 2015 03:48:35 -0500 Received: by pdev10 with SMTP id v10so11470868pde.10 for ; Thu, 26 Feb 2015 00:48:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=c7ip9ZsgP9aoYC3UhdSiTJm8b2E6HIFaPv3QRF6Y5lw=; b=v/oFGTcV9CnA7gkDMntOzMP9sjyZioRMe7TpU/AuALMcMZiWRhExOafny/62RewNNW PenKEgU2S65d7sK7IV/uaj8IYrsOYL5yIfWO0tgIxI+cFFqyxgWuOtz2E8LCFRmSOeq8 +rm3JK/SLCoLvjvAxqYrzMbiCJ2oiYdANFGHmF3pJ9lb8Xax0o+t54rVXX4uIE5NCQNe /AFmsjVOBshiodO5MZhC926ooLd2HdxXflkfGUG/4ASZvSXmhc2MycvUS7PIOR95RBSj EEw7hlgu8oncnyB4T2CrBHpnXOD6duvsIym6Wz2kmumiXUxypRLifWuN0DKr2083aRbq ps8g== X-Received: by 10.70.128.136 with SMTP id no8mr12817931pdb.151.1424940512156; Thu, 26 Feb 2015 00:48:32 -0800 (PST) Received: from Stas-Air.local (108-66-6-48.lightspeed.sntcca.sbcglobal.net. [108.66.6.48]) by mx.google.com with ESMTPSA id rr9sm260797pbc.39.2015.02.26.00.48.30 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Feb 2015 00:48:31 -0800 (PST) Message-ID: <54EEDDDD.3020607@gmail.com> Date: Thu, 26 Feb 2015 00:48:29 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Sammy Kaye Powers , Pierre Joye CC: Leigh , Tom Worster , php-internals References: In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > I'm cool with that idea but I also think it should be spelled out like ` > random_crypto_*()` as Pierre suggests. I like `secure_random_bytes()` but > that's because it's what Ruby names their CSPRNG. :) The custom is that the first word names the function group (yes, I know old functions do not follow it, but this is new one). Unless we're going to introduce a group of functions called secure_*, random_* is a natural choice. I would be careful with using words like "secure", "crypto" etc. in general because they may be easily misunderstood - something like random_bytes() would do as well I think. -- Stas Malyshev smalyshev@gmail.com