Hi Pierre, On Tue, Jul 5, 2016 at 12:02 PM, Pierre Joye <pierre....@gmail.com> wrote: >> Current implementation is regenerating random hash string by using >> >> - PID >> - Time (Simple random function) >> - CSPRNG when it is available > > For clarification, it is always available. Php requires a valid one to be > built. > > We can argue about the provided pnrng being CS but it is not php's job to > decide.
Thank you for clarification! Modern systems that execute PHP should have CSPRNG always. Regards, -- Yasuo Ohgaki yohg...@ohgaki.net -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
